CAU201 Exam Dumps Free Test Engine Verified By CyberArk Defender Certified Experts [Q98-Q112]

QUESTION 98
In accordance with best practice, SSH access is denied for root accounts on UNIXLINUX system.
What is the BEST way to allow CPM to manage root accounts?

QUESTION 99
According to the DEFAULT Web Options settings, which group grants access to the REPORTS page?

QUESTION 100
When a group is granted the ‘Authorize Account Requests’ permission on a safe Dual Control requests must be approved by

QUESTION 101
All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group Operations Staff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of Operations Managers never need to be able to use the show, copy or connect buttons themselves.
Which safe permission do you need to grant Operations Staff? Check all that apply.

QUESTION 102
A Vault Administrator team member can log in to CyberArk, but for some reason, is not given Vault Admin rights.
Where can you check to verify that the Vault Admins directory mapping points to the correct AD group?

QUESTION 103
The Password upload utility can be used to create safes.

QUESTION 104
By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?

QUESTION 105
You are onboarding 5,000 UNIX root accounts for rotation by the CPM. You discover that the CPM is unable to log in directly with the root account and will need to use a secondary account.
How should this be configured to allow for password management using least privilege?

QUESTION 106
Match the Status of Service on a DR Vault to what is displayed when it is operating normally in Replication mode.

QUESTION 107
One can create exceptions to the Master Policy based on ____________________.

QUESTION 108
The vault supports Subnet Based Access Control.

QUESTION 109
What is the name of the Platform parameters that controls how long a password will stay valid when One Time Passwords are enabled via the Master Policy?

QUESTION 110
Vault admins must manually add the auditors group to newly created safes so auditors will have sufficient access to run reports.

QUESTION 111
You are creating a new Rest API user that utilizes CyberArk Authentication.
What is a correct process to provision this user?

QUESTION 112
In the Private Ark client, how do you add an LDAP group to a CyberArk group?