あなたを合格させるCyberArk Defender CAU201試験問題集で2023年07月06日には179問あります
CAU201無料試験学習ガイド！（更新された179問あります)
サイバーアークディフェンダー（CAU201）試験は、サイバーアークの特権アカウントセキュリティソリューションを実装および管理するスキルを検証する包括的な認定テストです。特権アクセス管理とサイバー防御における専門知識を証明することを望むセキュリティ専門家にとって理想的な資格です。この認定を取得することで、専門家はキャリアの展望を向上させ、サイバーセキュリティの分野で専門家として認められることができます。
質問 # 95
Which of the following files must be created or configured m order to run Password Upload Utility? Select all that apply.
- A. PACli.ini
- B. A comma delimited upload file
- C. Vault.ini
- D. conf.ini
正解：B、C、D
質問 # 96
SAFE Authorizations may be granted to _________________.
Select all that apply.
- A. LDAP Users
- B. LDAP Groups
- C. Vault Groups
- D. Vault Users
正解：D
質問 # 97
Which certificate type do you need to configure the vault for LDAP over SSL?
- A. a CA signed Certificate for the Vault server
- B. the CA Certificate that signed the certificate used by the External Directory
- C. a self-signed Certificate for the Vault
- D. a CA signed Certificate for the PVWA server
正解：B
質問 # 98
To use PSM connections while in the PVWA, what are the minimum safe permissions a user or group will need?
- A. List Accounts, Use Accounts, Retrieve Accounts, Access Safe without confirmation
- B. Use Accounts
- C. List Accounts, Use Accounts, Retrieve Accounts
- D. List Accounts, Use Accounts
正解：B
質問 # 99
Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.
- A. Auto Detection (AD)
- B. On Demand Privileges Manager (OPM)
- C. Discovery and Audit (DMA)
- D. Accounts Discovery
- E. Export Vault Data (EVD)
正解：A、C、D
質問 # 100
It is possible to leverage DNA to provide discovery functions that are not available with auto-detection.
- A. TRUE
- B. FALSE
正解：A
質問 # 101
All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. Themembers of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group Operations Staff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of Operations Managers never need to be able to use the show, copy or connect buttons themselves.
Which safe permission do you need to grant Operations Staff? Check all that apply.
- A. Access Safe without Authorization
- B. Authorize Password Requests
- C. Retrieve Accounts
- D. Use Accounts
正解：C
質問 # 102
When a group is granted the 'Authorize Account Requests' permission on a safe Dual Control requests must be approved by
- A. That access cannot be granted to groups
- B. The number of persons specified by the Master Policy
- C. Any one person from that group
- D. Every person from that group
正解：B
解説：
Explanation/Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Dual- Control.htm#Confirmi
質問 # 103
The System safe allows access to the Vault configuration files.
- A. TRUE
- B. FALSE
正解：B
解説：
Explanation/Reference:
質問 # 104
Which of the Following can be configured in the Master Poky? Choose all that apply.
- A. One Time Passwords
- B. Password Aging Rules
- C. Password Reconciliation
- D. Required Properties
- E. Dual Control
- F. Exclusive Passwords
- G. Ticketing Integration
- H. Custom Connection Components
正解：B、C、D、F
質問 # 105
Which of the following files must be created or configured m order to run Password Upload Utility? Select all that apply.
- A. PACli.ini
- B. conf.ini
- C. A comma delimitedupload file
- D. Vault.ini
正解：C
質問 # 106
VAULT authorizations may be granted to ____________________.
Select all that apply.
- A. Vault Users
- B. LDAP Users
- C. LDAP Groups
- D. Vault Groups
正解：B
質問 # 107
Which parameter controls how often the CPM looks for Soon-to-be-expired Passwords that need to be changed.
- A. HeadStartInterval
- B. ImmediateInterval
- C. Interval
- D. The CPM does not change the password under this circumstance
正解：B
質問 # 108
Which report provides a list of account stored in the vault.
- A. Entitlement Report
- B. Privileged Accounts Compliance Status
- C. Active Log
- D. Privileged Accounts Inventory
正解：D
質問 # 109
In accordance with best practice, SSH access is denied for root accounts on UNIXLINUX system.
What is the BEST way to allow CPM to manage root accounts?
- A. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.
- B. Configure the CPM to allow SSH logins.
- C. Configure the Unix system to allow SSH logins.
- D. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account of the target server's root account.
正解：A
解説：
Explanation/Reference:
質問 # 110
Which command configures email alerts within PTA if settings need to be changed post install?
- A. /opt/tomcat/utility/emailSetup.sh
- B. /opt/PTA/utility/emailConfig.sh
- C. /opt/tomcat/utility/emailConfiguration.sh
- D. /opt/PTA/emailConfiguration.sh
正解：C
質問 # 111
......
CyberArk CAU201試験は、組織内の特権アカウントのセキュリティを管理する責任があるITプロフェッショナル向けに設計された認定試験です。CyberArkは、特権アクセスを管理するためのセキュリティソリューションの主要なプロバイダーであり、CAU201試験では、候補者のソリューションの実装と管理に関する知識と技能がテストされます。
サイバーアーク・ディフェンダー認定試験（CAU201）は、サイバーアークソリューションを扱い、組織内の特権アカウントのセキュリティを担当する専門家にとって貴重な認定資格です。この試験は、特権アカウントのセキュリティに関連する幅広いトピックをカバーしており、業界で高く評価されています。認定を取得することで、個人のキャリアの可能性が向上し、組織のサイバーセキュリティへの取り組みが示されます。
CAU201問題集はCyberArk Defender認証済み試験問題と解答：https://www.passtest.jp/CyberArk/CAU201-shiken.html
実際に出ると確認されたCAU201試験問題集と解答でCAU201無料更新：https://drive.google.com/open?id=1cmSivVnei270OrXrqq9O_9laCyAnEHqK