CAU302

CAU302 practice questions, page 9 of 9, with answer review and explanations.

Question 41

The System safe allows access to the Vault configuration files.

  1. TRUE
  2. FALSE

Question 42

Which of the Following can be configured in the Master Policy? (Choose all that apply.)

  1. Dual Control
  2. One Time Passwords
  3. Exclusive Passwords
  4. Password Reconciliation
  5. Ticketing Integration
  6. Required Properties
  7. Custom Connection Components
  8. Password Aging Rules

Question 43

Multiple PSM Servers can be load balanced.

  1. TRUE
  2. FALSE

Question 44

Which file would you modify to configure your Vault Server to forward Activity Logs to a Security Information and Event Management (SIEM) or SYSLOG server?

  1. dbparm.ini
  2. PARagent.ini
  3. ENEConf.ini
  4. padr.ini

Question 45

In accordance with best practice, SSH access is denied for root accounts on UNIX/LINUX systems. What is the BEST way to allow Central Policy Manager (CPM) to manage root accounts?

  1. Create a privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Reconcile account of the target server's root account.
  2. Create a non-privileged account on the target server. Allow this account the ability to SSH directly from the CPM machine. Configure this account as the Logon account of the target server's root account.
  3. Configure the Unix system to allow SSH logins.
  4. Configure the CPM to allow SSH logins.