Free CAU201 Braindumps Download Updated on Jan 29, 2023 with 179 Questions [Q55-Q75]

Q55. You have been asked to turn off the time access restrictions for a safe.
Where is this setting found?

Q56. CyberArk recommends implementing object level access control on all Safes.

Q57. Which report shows the accounts that are accessible to each user?

Q58. Select the best practice for storing the Master CD.

Q59. For a safe with Object Level Access enabled you can turn off Object Level Access Control when it no longer needed on the safe.

Q60. For each listed prerequisite, identify if it is mandatory or not mandatory to run the PSM Health Check.

Q61. A user requested access to view a password secured by dual-control and is unsure who to contact to expedite the approval process. The Vault Admin has been asked to look at the account and identify who can approve their request.
What is the correct location to identify users or groups who can approve?

Q62. For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

Q63. Which report could show all accounts that are past their expiration dates?

Q64. The System safe allows access to the Vault configuration files.

Q65. Target account platforms can be restricted to accounts that are stored in specific Safes using the AllowedSafes property.

Q66. All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group Operations Staff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of Operations Managers never need to be able to use the show, copy or connect buttons themselves.
Which safe permission do you need to grant Operations Staff? Check all that apply.

Q67. Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to be
changed.

Q68. Match each component to its respective Log File location.

Q69. The Vault administrator can change the Vault license by uploading the new license to the system Safe.

Q70. It is possible to restrict the time of day, or day of week that a [b]reconcile[/b] process can occur

Q71. Which of these accounts onboarding methods is considered proactive?

Q72. Which utilities could you use to change debugging levels on the vault without having to restart the vault.
Select all that apply.

Q73. According to the DEFAULT Web Options settings, which group grants access to the REPORTS page?

Q74. In accordance with best practice, SSH access is denied for root accounts on UNIXLINUX system.
What is the BEST way to allow CPM to manage root accounts?

Q75. What is the purpose of the CyberArk Event Notification Engine service?