QUESTION: 105

What is the primary purpose of One Time Passwords?

Reduced risk of credential theft
More frequent password changes
Non-repudiation (individual accountability)
To force a ‘collusion to commit’ fraud ensuring no single actor may use a password without authorization

Answer(s): A

All of your Unix root passwords are stored in the safe UnixRoot. Dual control is enabled for some of the accounts in that safe. The members of the AD group UnixAdmins need to be able to use the show, copy, and connect buttons on those passwords at any time without confirmation. The members of the AD group OperationsStaff need to be able to use the show, copy and connect buttons on those passwords on an emergency basis, but only with the approval of a member of OperationsManagers. The members of OperationsManagers never need to be able to use the show, copy or connect buttons themselves.

Which safe permissions do you need to grant to OperationsManagers? (Choose all that apply.)

Use Accounts
Retrieve Accounts
List Accounts
Authorize Password Requests
Access Safe without Authorization

Answer(s): A,B,C

Reveal Solution Next Question

QUESTION: 107

Ad-Hoc Access (formerly Secure Connect) provides the following features. (Choose all that apply.)

PSM connections to target devices that are not managed by CyberArk
Session Recording
Real-time live session monitoring
PSM connections from a terminal without the need to login to the Password Vault Web Access (PVWA)

Answer(s): A,B,C

Reveal Solution Next Question

QUESTION: 108

An auditor initiates a LIVE monitoring session to PSM server to view an ongoing LIVE session. When the auditor’s machine makes an RDP connection the PSM server, which user will be used?

PSMAdminConnect
Shadowuser
PSMConnect
Credentials Stored in the Vault for the Target Machine

Answer(s): A

Reveal Solution Next Question

Free CAU302 Exam Braindumps (page: 28)

QUESTION: 105

QUESTION: 106

QUESTION: 107

QUESTION: 108

CAU302 Discussions & Posts