CyberArk CAU305 Exam Questions

Questions for the CAU305 were updated on : Dec 01 ,2025

Page 1 out of 5. Viewing questions 1-15 out of 65

Question 1

Time of day or day of week restrictions on when password reconciliations can occur are configured in
the
.

  • A. Master Policy
  • B. platform settings
  • C. Safe settings
  • D. account details
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%

Reference:
https://docs.cyberark.com/ProductDoc/OnlineHelp/PAS/Latest/en/Content/PASREF/Auto
matic%
20Password%20Management%20-%20Password%20Reconciliation.htm

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 2

If a transparent user matches two different directory mappings, how does the system determine
which user template to use?

  • A. The system will use the template for the mapping listed first.
  • B. The system will use the template for the mapping listed last.
  • C. The system will grant all of the Vault authorizations from the two templates.
  • D. The system will grant only the Vault authorizations that are listed in both templates.
Answer:

A

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 3

The Vault can only integrate with a single Security Information and Event Management (SIEM) or
SYSLOG server.

  • A. True
  • B. False
Answer:

B

User Votes:
A
50%
B
50%

Reference:
https://docs.cyberark.com/Product-
Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Integrating
- with-SIEM-Applications.htm

Discussions
vote your answer:
A
B
0 / 1000

Question 4

Multiple Password Vault Web Access (PVWA) servers can be load balanced.

  • A. True
  • B. False
Answer:

A

User Votes:
A
50%
B
50%

Reference:
https://docs.cyberark.com/Product-
Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/
Password-Vault-Web-Access-Installation.htm

Discussions
vote your answer:
A
B
0 / 1000

Question 5

Which of the following is NOT a use case for installing multiple Central Policy Managers (CPM)?

  • A. A single CPM cannot accommodate the total number of accounts managed.
  • B. Accounts are managed in multiple sites or VLANs protected by firewall.
  • C. Reduce network traffic across WAN links.
  • D. Provide load-balancing capabilities when managing passwords on target devices.
Answer:

A

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 6

A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and
facilitating workflow processes, such as Dual Control.

  • A. True
  • B. False
Answer:

B

User Votes:
A
50%
B
50%
Discussions
vote your answer:
A
B
0 / 1000

Question 7

Which file is used to integrate the Vault with the RADIUS server?

  • A. radius.ini
  • B. PARagent.ini
  • C. ENEConf.ini
  • D. dbparm.ini
Answer:

D

User Votes:
A
50%
B
50%
C
50%
D
50%

Reference:
https://docs.secureauth.com/pages/viewpage.action?pageId=40045055

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 8

What is the proper way to allow the Vault to resolve host names?

  • A. Define a DNS server.
  • B. Define a WINS server.
  • C. Define the local hosts file.
  • D. The Vault cannot resolve host names due to security standards.
Answer:

A

User Votes:
A
50%
B
50%
C
50%
D
50%

Reference:
https://docs.cyberark.com/Product-
Doc/OnlineHelp/PAS/Latest/en/Content/PAS%20INST/
Configuring-Transparent-User-
Management.htm

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 9

The password upload utility must run from the Central Policy Manager (CPM) server.

  • A. True
  • B. False
Answer:

B

User Votes:
A
50%
B
50%

Reference:
https://docs.cyberark.com/Product-
Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Password
- Upload-Utility.htm

Discussions
vote your answer:
A
B
0 / 1000

Question 10

Which is the purpose of the allowed Safes parameter in a Central Policy Manager (CPM) policy?
(Choose two.)

  • A. To improve performance by reducing CPM workload
  • B. To prevent accidental use of a policy in the wrong Safe
  • C. To allow users to access only the passwords they should be able to access
  • D. To enforce Least Privilege in CyberArk
Answer:

AC

User Votes:
A
50%
B
50%
C
50%
D
50%
Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 11

For the hardening process to complete successfully, the Vault administrator must ensure that the
antivirus software on the Vault server is installed and up to date before running the installation.

  • A. True
  • B. False
Answer:

B

User Votes:
A
50%
B
50%

Reference:
https://docs.cyberark.com/Product-
Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Install-the
-
CyberArk-Vault-Normal-
Installation.htm

Discussions
vote your answer:
A
B
0 / 1000

Question 12

If a user is a member of more than one group that has authorizations on a Safe, by default that user
is granted
.

  • A. the Vault will not allow this situation to occur
  • B. only those permissions that exist on the group added to the Safe first
  • C. only those permissions that exist in all groups to which the user belongs
  • D. the cumulative permissions of all the groups to which that user belongs
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%

Reference:
https://docs.cyberark.com/Product-
Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Managing
- Groups.htm

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 13

PSM for SSH (previously known as PSM-SSH Proxy) supports connections to which of the following
target systems?

  • A. Windows
  • B. Unix
  • C. Oracle
  • D. All of the above
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%

Reference:
https://docs.cyberark.com/Product-
Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Introduction
-
to-
PSMP.htm#:~:text=PSM%20for%20SSH%20enables%20end,clients%20or%20the%20SCP%20comman
d

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 14

Which parameter controls how often the Central Policy Manager (CPM) looks for soon-to-be-expired
passwords that need to be changed?

  • A. HeadStartInterval
  • B. Interval
  • C. ImmediateInterval
  • D. The CPM does not change the password under this circumstance.
Answer:

A

User Votes:
A
50%
B
50%
C
50%
D
50%

Reference:
https://www.niap-ccevs.org/MMO/Product/st_vid11006-agd6.pdf

Discussions
vote your answer:
A
B
C
D
0 / 1000

Question 15

When working with the CyberArk Disaster Recovery (DR) solution, which services should be running
on the DR Vault?

  • A. CyberArk Vault Disaster Recovery (DR), PrivateArk Database
  • B. CyberArk Vault Disaster Recovery
  • C. CyberArk Vault Disaster Recovery, PrivateArk Database, PrivateArk Server
  • D. CyberArk Vault Disaster Recovery, PrivateArk Database, CyberArk Event Notification Engine
Answer:

B

User Votes:
A
50%
B
50%
C
50%
D
50%

Reference:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/
DRCompenents.htm

Discussions
vote your answer:
A
B
C
D
0 / 1000
To page 2