CyberArk Defender + Sentry - CAU302 Exam Questions [2026]

QUESTION NO: 1
Name two ways of viewing the ITAlog:

A. Log into the PVWA and go to the Reports tab. B. Access the System Safe from the PrivateArk client. C. Log into the vault locally and navigate to the Server folder under the PrivateArk install location. D. Go to the Thirdpary log directory on the CPM

Correct Answer: B,C

QUESTION NO: 2
Which of the following components can be used to create a tape backup of the Vault?

A. Disaster Recovery B. High Availability C. Distributed Vaults D. Replicate

Correct Answer: D

QUESTION NO: 3
HA, DR, Replicate are mutually exclusive and cannot be used in the same environment.

A. FALSE B. TRUE

Correct Answer: A

QUESTION NO: 4
The following applications are pre-configured to work with PSM. but first need to be installed on the PSM server.

A. Microsoft SQL Management Studio B. WinSCP C. RDP D. SQL Plus E. VMWare vSphere Client F. Toad G. Putty

Correct Answer: B,C,D,G

QUESTION NO: 5
A Simple Mail Transfer Protocol (SMTP) integration is critical for monitoring Vault activity and facilitating workflow processes, such as Dual Control.

A. True B. False

Correct Answer: B

QUESTION NO: 6
PSM requires the Remote Desktop Session Host role service.

A. FALSE
Ready the PSM server machine The following section describes prerequisites for the PSM server machine.
Remote Desktop Services (RDS) Session Host Role
For Windows 2012 R2 and Windows 2016, verify that Windows update KB4458842 is installed B. TRUE

Correct Answer: B

QUESTION NO: 7
During ENE integration you should specify the Fully-Qualified Domain Name (FQDN) of the SMTP Gateway server.

A. FALSE B. TRUE

Correct Answer: A

QUESTION NO: 8
When planning to load balance at least 2 PSM Servers in an "in-domain" deployment, is it required to move the PSMConnect and PSMAdminConnect users to the domain level?

A. No. this is the customers decision and will work with local or domain based users. B. No. both accounts must be left as local accounts. C. Yes, both PSMConnect and PSMAdminConnect users should be moved to the domain D. Yes. but only the PSMConnect user must be moved to the domain.

Correct Answer: B

QUESTION NO: 9
The Vault can only integrate with a single Security Information and Event Management (SIEM) or SYSLOG server.

A. True B. False

Correct Answer: B

QUESTION NO: 10
A SIEM integration allows you to forward ITALOG records to a monitoring solution.

A. FALSE B. TRUE

Correct Answer: A

QUESTION NO: 11
When the PSM Gateway (also known as the HTML5 Gateway) is implemented, users must have an RDP client, such as MSTSC, installed on their endpoint in order to launch connections via the PSM.

A. False. When the PSM Gateway is implemented, the user only requires a browser in order launch a connection via the PSM. B. True

Correct Answer: B

QUESTION NO: 12
The System safe allows access to the Vault configuration files.

A. FALSE B. TRUE

Correct Answer: B

QUESTION NO: 13
If a user is a member of more than one group that has authorizations on a safe, by default that user is granted
__________________.

A. the vault will not allow this situation to occur. B. only those permissions that exist on the group added to the safe first. C. the cumulative permissions of all the groups to which that user belongs D. only those permissions that exist in all groups to which the user belongs.

Correct Answer: C