Loading demo links...
Showing 1–15 of 15 questions
DRAG DROP
In version 10.7 the correct order of installation for components changed. Make the necessary corrections to the
list below to show the new installation order. Select and Place:
Answer is in the explanation below.
Which of the Following can be configured in the Master Policy? (Choose all that apply.)
Select all that apply, then click Submit answer.
Dual Control
One Time Passwords
Exclusive Passwords
Password Reconciliation
Ticketing Integration
Required Properties
Custom Connection Components
Password Aging Rules
What are the functions of the Remote Control Agent service? (Choose all that apply.)
Select all that apply, then click Submit answer.
Allows remote monitoring of the Vault
Sends SNMP traps from the Vault
Maintains audit data
Allows CyberArk Services to be managed (start/stop/status) remotely
Which CyberArk components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? (Choose all that apply.)
Select all that apply, then click Submit answer.
Discovery and Audit (DNA)
Auto Detection (AD)
Export Vault Data (EVD)
On Demand Privileges Manager (OPM)
Accounts Discovery
What conditions must be met in order to log into the vault as the Master user? (Choose all that apply.)
Select all that apply, then click Submit answer.
Logon must be originated from the console of the Vault Server or an EmergencyStation defined in DBParm.ini
User must provide the correct master password.
Logon requires the Recovery Private Key to be accessible to the vault.
Logon must satisfy a challenge response request.
Which of the following are secure options for storing the contents of the Operator CD, while still allowing the contents to be accessible upon a planned Vault restart? (Choose all that apply.)
Select all that apply, then click Submit answer.
Store the CD in a physical safe and mount the CD every time vault maintenance is performed.
Copy the entire contents of the CD to the System Safe on the vault.
Copy the entire contents of the CD to a folder on the Vault Server and secure it with NTFS permissions.
Store the server key in a Hardware Security Module (HSM) and copy the reset the keys from the CD to a folder on the Vault Server and secure it with NTFS permissions.
Which of the following PTA detections require the deployment of a Network Sensor or installing the PTA Agent on the domain controller?
Select all that apply, then click Submit answer.
Suspected credential theft
Over-Pass-The-Hash
Golden Ticket
Unmanaged privileged access
Name two ways of viewing the ITAlog:
Select all that apply, then click Submit answer.
Log into the vault locally and navigate to the Server folder under the PrivateArk install location.
Log into the PVWA and go to the Reports tab.
Access the System Safe from the PrivateArk client.
Go to the Thirdpary log directory on the CPM
After the Vault server is installed, the Microsoft Windows firewall is now commandeered by the Vault. Can the administrator change these firewall rules?
Select an option, then click Submit answer.
Yes, but the administrator can only modify the firewall rules by editing the dbparm.ini file and the restarting the Vault.
Yes, the administrator can still modify firewall rules via the Windows firewall interface.
No, the Vault does not permit any changes to the firewall due to security requirements.
Yes, but the administrator can only modify the firewall rules by editing the FirewallRules.ini file and the restarting the Vault.
The Vault needs to send Simple Network Management Protocol (SNMP) traps to an SNMP solution. In which configuration file do you set the IP address of the SNMP solution?
Select an option, then click Submit answer.
PARAgent.ini
dbparm.ini
ENEConf.ini
my.ini
In Accounts Discovery, you can configure a Windows discovery to scan ___________.
Select an option, then click Submit answer.
as many OUs as you wish.
up to three OUs.
only one OU.
a number of OUs determined by the OUstoScan setting under the Accounts Feed section in the Administration tab.
A Simple Network Management Protocol (SNMP) integration allows you to forward audit records from the vault to the Security Information and Event Management (SIEM).
Select an option, then click Submit answer.
TRUE
FALSE
The Accounts Feed contains:
Select an option, then click Submit answer.
Accounts that were discovered by CyberArk in the last 30 days
Accounts that were discovered by CyberArk that have not yet been onboarded
All accounts added to the vault in the last 30 days
All users added to CyberArk in the last 30 days
It is possible to restrict the time of day, or day of week that a verify process can occur
Select an option, then click Submit answer.
TRUE
FALSE
The vault provides a tamper-proof audit trail.
Select an option, then click Submit answer.
TRUE
FALSE
Prepare for the CyberArk Defender + Sentry (CAU302) exam with this free practice test from Study4Pass, built around the real CyberArk syllabus. The 15 questions are a free sample of the full Study4Pass practice set of 227 questions, so you can check your level before you commit to the real exam. The free sample includes 7 single-answer, 7 multiple-answer and 1 drag-and-drop questions — the same mix of formats you will meet in the full set. Questions are spread across the areas that matter most on the real exam: CyberArk Privileged Access Security Solution Overview, CyberArk Core Components, CyberArk Security Best Practices and CyberArk Administration and Maintenance. CyberArk CAU302 is an exam that tests a candidate's knowledge and skills in the areas of CyberArk Privileged Access Security Solution.
The Target Audience for the CyberArk CAU302 Exam includes professionals and IT administrators who have experience with CyberArk's Privileged Access Security Solution, including Privileged Account Security, Password Vault, Application Identity… The Prerequisite for CyberArk CAU302 Exam is completion of the CyberArk CAU201 Exam and the CyberArk Defender and Sentinel Implementation course.
Treat this sample as a diagnostic. Answer honestly, check the explanation after every question, and note which topics feel shaky. A short, focused review of those topics is worth more than re-reading everything — and the full set lets you drill them topic by topic.
A good way to use this page: take the whole sample in one sitting, then go back over every explanation with fresh eyes. Mark the topics that felt uncertain, not just the ones you got wrong — uncertain answers are unmarked risk on the real exam. One or two focused passes like this usually move a score more than days of passive reading.
Inside the full CAU302 practice set:
Answer a question, then check the result to see the correct answer and the explanation behind it. Work at your own pace — there is no timer and no signup. Stuck on a concept? This is an AI-Enabled practice test: use Ask AI on any question and get the underlying concept explained in plain words, so you learn the reasoning instead of memorizing answers. When the free sample feels comfortable, the full set of 227 questions adds timed Exam Simulation, topic-by-topic training, and flagged-question review — the closest thing to exam day you can get before the real thing.
Yes. Every question on this page — all 15 of them — is free to use, and you never need to create an account to try them.
The full Study4Pass set for CAU302 has 227 practice questions. This page gives you 15 of them free so you can judge the quality and difficulty first.
Yes. Check any question to reveal the correct answer and its explanation, and use Ask AI whenever you want the underlying concept explained step by step.
No — these are practice questions built to match the CAU302 domains and difficulty level, so you can prepare for the real exam with confidence.
