Free CAU201 Questions for CyberArk Defender CAU201 Exam as PDF & Practice Test Engine

Exam Code/Number: CAU201
Exam Name/Title: CyberArk Defender
Certification Provider: CyberArk
Corresponding Certification: CyberArk Defender

Exam Questions: 179
Updated On: Oct 25, 2026

Question #1

By default, members of which built-in groups will be able to view and configure Automatic Remediation and Session Analysis and Response in the PVWA?

A. Security Admins

B. Vault Admins

C. Auditors

D. Security Operators

Discussion 0

Correct Answer: A Vote an answer

Question #2

Which Cyber Are components or products can be used to discover Windows Services or Scheduled Tasks that use privileged accounts? Select all that apply.

A. Accounts Discovery

B. Export Vault Data (EVD)

C. Auto Detection (AD)

D. On Demand Privileges Manager (OPM)

E. Discovery and Audit (DMA)

Discussion 0

Correct Answer: A,C,E Vote an answer

Question #3

When managing SSH keys, the CPM stored the Private Key

A. Nowhere because the private key can always be generated from the public key.

B. A & B

C. In the Vault

D. On the target server

Discussion 0

Correct Answer: C Vote an answer

Question #4

Match the built-in Vault User with the correct definition.

Discussion 0

Correct Answer:

Reference:
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Predefined-Users-and-Groups.htm?TocPath=Administration%7CUser%20Management%7C_____7

Question #5

Which one the following reports is NOT generated by using the PVWA?

A. Accounts Inventory

B. Sales List

C. Application Inventory

D. Convince Status

Discussion 0

Correct Answer: B Vote an answer

Question #6

You are creating a shared safe for the help desk.
What must be considered regarding the naming convention?

A. The use of these characters V:*<>".| is not allowed.

B. Combine environments, owners and platforms to minimize the total number of safes created.

C. Ensure your naming convention is no longer than 20 characters.

D. Safe owners should determine the safe name to enable them to easily remember it.

Discussion 0

Correct Answer: A Vote an answer

Question #7

Which of the following Privileged Session Management solutions provide a detailed audit log of session activities?

A. PSM for Windows (previously known as RDP Proxy)

B. PSM (i.e., launching connections by clicking on the "Connect" button in the PVWA)

C. All of the above

D. PSM for SSH (previously known as PSM SSH Proxy)

Discussion 0

Correct Answer: B Vote an answer

Question #8

You are logging into CyberArk as the Master user to recover an orphaned safe.
Which items are required to log in as Master?

A. Operator CD, Master Password, console access to the PVWA server, PVWA access

B. Operator CD, Master Password, console access to the Vault server, Recover.exe

C. Master CD, Master Password, console access to the Vault server, Private Ark Client

D. Master CD, Master Password, console access to the PVWA server, Recover.exe

Discussion 0

Correct Answer: C Vote an answer

Question #9

Which report provides a list of account stored in the vault.

A. Privileged Accounts Compliance Status

B. Active Log

C. Privileged Accounts Inventory

D. Entitlement Report

Discussion 0

Correct Answer: C Vote an answer

Question #10

The Password upload utility can be used to create safes.

A. FALS

B. TRUE

Discussion 0

Correct Answer: B Vote an answer

Question #11

As long as you are a member of the Vault Admins group you can grant any permission on any safe.

A. FALSE

B. TRUE

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for ExamDiscuss members. You can sign-up / login (it's free).

Question #12

Which values are acceptable in the address field of an Account?

A. Any name that is resolvable on the Central Policy Manager (CPM) server is acceptable

B. It must be a Fully Qualified Domain Name (FQDN)

C. It must be NetBIOS name

D. It must be an IP address

Discussion 0

Correct Answer: A Vote an answer

Question #13

A user has successfully conducted a short PSM session and logged off. However, the user cannot access the Monitoring tab to view the recordings.
What is the issue?

A. The user is not a member of the PVWAMonitor group

B. The user must login as PSMAdminConnect

C. The user is not a member of the Auditors group

D. The PSM service is not running

Discussion 0

Correct Answer: C Vote an answer

Question #14

You are onboarding an account that is not supported out of the box.
What should you do first to obtain a platform to import?

A. Search common community portals like stackoverflow, reddit, github for an existing platform.

B. Create a service ticket in the customer portal explaining the requirements of the custom platform.

C. From the platforms page, uncheck the "Hide non-supported platforms" checkbox and see if a platform meeting your needs appears.

D. Visit the CyberArk marketplace and search for a platform that meets your needs.

Discussion 0

Correct Answer: B Vote an answer

Free CAU201 Questions for CyberArk Defender CAU201 Exam as PDF & Practice Test Engine

Download Free CyberArk CAU201 Demo