CyberArk CAU201 問題集

質問 1：
Match each PTA alert category with the PTA sensors that collect the data for it.

正解：


質問 2：
Target account platforms can be restricted to accounts that are stored m specific Safes using the Allowed Safes property.
A. FALSE
B. TRUE
正解：B

質問 3：
All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group Operations Staff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of Operations Managers never need to be able to use the show, copy or connect buttons themselves.
Which safe permission do you need to grant Operations Staff? Check all that apply.
A. Use Accounts
B. Authorize Password Requests
C. Retrieve Accounts
D. Access Safe without Authorization
正解：A,B,C

質問 4：
To enable the Automatic response "Add to Pending" within PTA when unmanaged credentials are found, what are the minimum permissions required by PTAUser for the PasswordManager_pending safe?
A. List Accounts, Add accounts (includes update properties), Delete Accounts, Manage Safe
B. Add accounts (includes update properties), Update Account content, Update Account properties, View Audit
C. List Accounts, View Safe members, Add accounts (includes update properties), Update Account content, Update Account properties
D. View Accounts, Update Account content, Update Account properties, Access Safe without confirmation, Manage Safe, View Audit
正解：C

質問 5：
What is the primary purpose of Dual Control?
A. More frequent password changes
B. To force a 'collusion to commit' fraud ensuring no single actor may use a password without authorization.
C. Reduced risk of credential theft
D. Non-repudiation (individual accountability)
正解：B

質問 6：
As long as you are a member of the Vault Admins group, you can grant any permission on any safe that you have access to.
A. FALSE
B. TRUE
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Which of the Following can be configured in the Master Poky? Choose all that apply.
A. Ticketing Integration
B. Password Reconciliation
C. Dual Control
D. Custom Connection Components
E. One Time Passwords
F. Exclusive Passwords
G. Required Properties
H. Password Aging Rules
正解：C,E,F,H