CA Privileged Identity Manager r12.x (CA ControlMinder) Implementation Proven Professional Exam (CAT-480) Study Guide Version 1.5

Transcription

1 Proven Professional Exam (CAT-480) Study Guide Version 1.5

2 PROPRIETARY AND CONFIDENTIAL INFORMATION 2016 CA. All rights reserved. CA onfidential & proprietary information. For CA, CA Partner and CA Customer use only. No unauthorized use, opying or distribution. All names of individuals or of ompanies referened herein are fititious names used for instrutional purposes only. Any similarity to any real persons or businesses is purely oinidental. All trademarks, trade names, servie marks and logos referened herein belong to their respetive ompanies. These Materials are for your informational purposes only, and do not form any type of warranty. The use of any software or produt referened in the Materials is governed by the end user s appliable liense agreement. CA is the manufaturer of these Materials. Provided with Restrited Rights.

3 The Exam Experiene You an register to take an online protored exam from your home or offie using Kryterion s Online Protoring (OLP) Servies, or you an take an on-site protored exam at a Kryterion testing enter. If you hoose to take an online protored exam, you will need Internet aess, an external web amera, and a omputer that meets speifi hardware and software requirements. For answers to frequently asked questions about registering for exams, loations, on-site and virtual protoring, OLP equipment requirements, anellation and re-sheduling poliies and more, read our FAQs at n-faq.aspx. CA employees may also go here for more information: The CA Tehnologies Certifiation Program is designed to measure your skills, knowledge, and expertise in managing, administering, installing, onfiguring and implementing selet CA Tehnologies produts for omplete and optimized IT solutions. With CA ertifiations, management teams will have peae of mind that knowledgeable professionals are handling their CA Tehnologies appliations. Protored by a third party vendor, KryterionOnline, CA Tehnologies ertifiations objetively validate the ompetenies of a projet team whether that team is your in-house staff, CA Tehnologies Professional Servies, or a CA Tehnologies partner. The aim of this doument is to help you prepare for CA Privileged Identity Manager (ControlMinder) r12.x Implementation Proven Professional Exam. Make sure that you familiarize yourself with the ontent areas tested. Your best path to suess is to attend the exam prep ourse(s). You may also find it helpful to review the produt doumentation at and to partiipate in CA Global User Community forums at The experiene gained from taking ourses and using the produt will help you: Gain a omprehensive understanding of the produt or solution Inrease the likelihood of passing the exam on your first attempt Professional Exam Details Produt release: Major release listed in the title; Inludes subsequent point releases Reertifiation: There is no annual requirement to reertify for the same release of a produt. For eah major produt release, an updated exam will be available for reertifiation. Number of items = 50 Item types = Multiple hoie, inluding multiple response questions Time to omplete test: 90 minutes Passing sore is 70% Attempts Permitted: You may register for your first retake immediately. For subsequent retakes you are required to wait at least thirty (30) alendar days from the date of your last attempt. Read the online FAQs for details.

4 Only qualified andidates who demonstrate ompeteny by suessfully passing the CA Tehnologies ertifiation exam will be awarded ertifiation redentials. Prospetive ertifiation andidates are enouraged to prepare for the exam using the Exam Study Guide and other materials available on the Certifiation from CA Tehnologies website. To safeguard the integrity of the ertifiation program, CA Tehnologies requires all andidates to behave in an ethial manner and to omply with the rules of the third-party test enter for on-site protoring and on-line protoring. The validity of the ertifiation program depends on the exam ontent remaining seure and undislosed to other potential ertifiation andidates. CA Tehnologies will not tolerate heating, fraud, or misondut, whih inludes but is not limited to the following: Obtaining, whether through purhase or otherwise aquiring, unauthorized exam preparation materials from any non-ca website Obtaining, whether through purhase or otherwise aquiring, unauthorized exam questions from any non-ca website, inluding brain dump websites Aquiring or attempting to aquire exam questions through online ommunities, hat rooms, sreen apture software, forums, and soial networking sites Aquiring or attempting to aquire exam ontent through CA Subjet Matter Experts, CA Support Staff, or CA Certified Professionals Using or attempting to use a proxy to sit for the exam in your plae Taking or attempting to take an exam for someone else Reeiving or giving assistane during an exam Sharing exam questions or answers with a potential ertifiation andidate Violating testing enter rules Falsifying a diploma or sore report Using a CA Tehnologies ertifiation logo or redential to whih you are not entitled CA Tehnologies reserves the right to take any ations it deems reasonably appropriate in the ase of suspeted misondut or violation of the terms of the Non-Dislosure Agreement, inluding, but not limited to, anelling an exam result, revoking exam or ertifiation status, terminating use of the Designation, requiring a andidate to retake an exam, banning a andidate from the ertifiation program, and reporting misondut to the andidate s employer. CA Tehnologies onsiders heating a serious offense that warrants disiplinary ation, up to and inluding termination of employment.

5 Areas of Study support.a.om Prior Knowledge awiki.a.om CA Teh Insider Best Praties ommunities.a.om Use Cases & Senarios Pratial Appliation of Course Conepts CA ControlMinder r12.8 Courses: 04CMR20060 CA ControlMinder 12.8: Introdution and Arhiteture 200 (0.5 hours) 04CMR20041 CA ControlMinder 12.8: Implementation 200 (2 days) 04CMR20051 CA ControlMinder 12.8: Core Administration 200 (2 days) 04CMR20071 CA ControlMinder 12.8: Using UNIX Authentiation Broker 200 (1 day) 04CMR20081 CA ControlMinder 12.8: Using Shared Aount Management 200 (1 day) Searh the CA Eduation Portal for latest ourses, as they may not have been available at the time of this doument posting: Partners & Customers look here: Employees look here: For doumentation, Communities, and more visit: Register for the exam here:

6 Related Content Exam Fous Understanding CA ControlMinder 04CMR20060 CA ControlMinder 12.8: Introdution and Arhiteture 200 Introdution Desribe the Key Capabilities of CA ControlMinder Desribe the Components of the Enterprise Deployment Arhiteture Installing CA ControlMinder Server Components Configuring JBoss and Enterprise Management for SSL Communiation Installing the CA ControlMinder Reporting Servie Server Components Configuring the Reporting Servie Server Components Exam objetives as they map to related ourseware and the body of knowledge, inluding perentage of exam devoted to topis. 04CMR20041 CA ControlMinder 12.8: Implementation 200 Install CA ControlMinder Server Components Identify Guidelines for Implementing an Enterprise Deployment of CA ControlMinder Install CA ControlMinder Enterprise Management 04CMR20041 CA ControlMinder 12.8: Implementation 200 Configure JBoss and Enterprise Management for SSL Communiation Configure Enterprise Management for SSL Communiation 04CMR20041 CA ControlMinder 12.8: Implementation 200 Install the CA ControlMinder Reporting Servie Server Components Desribe the CA ControlMinder Reporting Servie Server Components Install the CA ControlMinder Reporting Servie Server Components 04CMR20041 CA ControlMinder 12.8: Implementation 200 Configure the Reporting Servie Server Components Deploy Report Pakages Configure the Connetion to CA Business Intelligene Installing the Endpoints 04CMR20041 CA ControlMinder 12.8: Implementation 200 Install the Endpoints Install a Windows Endpoint Install a UNIX Endpoint Configuring the Endpoints 04CMR20041 CA ControlMinder 12.8: Implementation 200 Configure the Endpoints Configure Endpoints for Advaned Poliy Management Configure Endpoint Enryption, Reporting, and Enterprise Users 20% Doumentation at support.a.om, Field Experiene Identify Classes for Advaned Poliy Management Install Advaned Poliy Management Components

7 Related Content Exam Fous Extending CA ControlMinder 04CMR20041 CA ControlMinder 12.8: Implementation 200 Extend CA ControlMinder Desribe CA ControlMinder Integration with CA User Ativity Reporting Module Deploy Additional Servers to Handle Endpoint Capaity Troubleshooting CA ControlMinder 04CMR20041 CA ControlMinder 12.8: Implementation 200 Troubleshoot CA ControlMinder Identify Troubleshooting Tehniques in CA ControlMinder Managing Users and Groups 04CMR20051 CA ControlMinder 12.8: Core Administration 200 Manage Users and Groups Manage Enterprise Management Users and Groups Assign Roles to Enterprise Management Users Manage Users and Groups Controlling Aess to Resoures 04CMR20051 CA ControlMinder 12.8: Core Administration 200 Control Aess to Resoures Desribe Resoures Enfore Aess Rights Set up Default Objet Protetions Controlling User Aess 04CMR20051 CA ControlMinder 12.8: Core Administration 200 Control User Aess Control User ID Substitution Prevent Password Attaks Proteting Files and Programs 04CMR20051 CA ControlMinder 12.8: Core Administration 200 Protet Files and Programs Protet Files and Diretories Protet Sensitive Programs and Files from Tampering Proteting Servers 04CMR20051 CA ControlMinder 12.8: Core Administration 200 Protet Servers Protet Network Aess Proteting Windows Servies and the Registry 04CMR20051 CA ControlMinder 12.8: Core Administration 200 Protet Windows Servies and the Registry Protet Windows Servies Protet Registry Keys 8% 6% 8%

8 Related Content Exam Fous Managing Poliies 04CMR20051 CA ControlMinder 12.8: Core Administration 200 Manage Poliies Create CA ControlMinder Poliies Deploy CA ControlMinder Poliies Update CA ControlMinder Poliies Introduing the UNIX Authentiation Broker 04CMR20071 CA ControlMinder 12.8: Using UNIX Authentiation Broker 200 Introduing the UNIX Authentiation Broker Desribe the Integration Modes in UNAB Working with UNAB 04CMR20071 CA ControlMinder 12.8: Using UNIX Authentiation Broker 200 Working with UNAB Register a UNIX Host in Ative Diretory Understanding Shared Aount Management 04CMR20081 CA ControlMinder 12.8: Using Shared Aount Management 200 Desribe Shared Aount Management Define Shared Aount Management Implementing SAM 04CMR20081 CA ControlMinder 12.8: Using Shared Aount Management 200 Implement SAM Set Up Shared Aounts Import Endpoints and Aounts Implementing Redundany and Failover Doumentation at support.a.om, Field Experiene Implement Redundany and Failover Set Up DH Redundany and Failover 6% 6%

9 Sample Certifiation These sample questions are very similar to the questions in the atual exam. Some questions may inlude several orret options. Questions Options Question 1 Why do large organizations need to implement ontrols for privileged users? (Choose two) Question 2 Whih solution senario applies to organizations onerned with meeting government regulations and guidelines? Question 3 Examples of key apabilities of CA ControlMinder inlude: (Choose three) A. Privileged users an abuse their authority. B. Privileged users pose a partiularly signifiant threat to network and data seurity. C. Insider attaks are inreasingly diffiult to prevent and detet beause they are only initiated by privileged users. D. External attakers seek to gain aess to privileged identities diretly, and do not tend to esalate aess from unprivileged aounts. A. Proving Compliane B. Managing Headount C. Lowering Costs through Seure Virtualization D. Preventing Seurity Breahes from Insiders and External Attakers A. seure auditing. B. poliy-based ompliane reporting. C. Shared Aount Management (SAM). D. an in-built Web Aess Management System (WAM). E. Pluggable Authentiation Modules (PAMs) to protet key ports. Question 4 What does the Enterprise Reporting faility do? (Choose three) A. Displays data from the CA ControlMinder entral database B. Presents useful views of the CA ControlMinder infrastruture status C. Provides textual and graphial information about CA ControlMinder endpoints D. Failitates the deployment of CA ControlMinder poliies to enterprise endpoints E. Notifies the Advaned Poliy Management omponent that the endpoint is ative Question 5 You an install CA ControlMinder r12.8 Enterprise Management on: A. Orale Solaris 11. B. CentOS Linux 64-bit. C. Red Hat Linux 32-bit. D. Red Hat Linux 64-bit. Question 6 You need to hek if snapshots are reahing the entral database. Whih omponent should you examine to determine if there are ommuniation issues? A. Report Portal B. Message Queue (MQ) C. Endpoint Management D. Deployment Map Server (DMS)

10 Questions Question 7 The Report Agent is a proess on: (Choose three) Question 8 Whih Distribution Server omponent is onfigured to reeive reporting data from endpoints? Question 9 You an install CA ControlMinder endpoints on: Question 10 You are installing CA ControlMinder on a UNIX endpoint. What is the minimum memory requirement? Question 11 In Enterprise Management, you an list the endpoints by: (Choose three) Question 12 Whih lass identifies a olletion of endpoints that will reeive the same POLICY? Question 13 What should a POLICY lass inlude? (Choose two) Options A. the Distribution Server. B. the Enterprise Management Server. C. the CA User Ativity Reporting Server. D. eah CA ControlMinder or UNIX Authentiation Broker (UNAB) endpoint. A. Central database B. Message Queue (MQ) C. Deployment Map Server (DMS) D. CA Business Intelligene (CABI) A. Windows Server 2008 SP1. B. all editions of Windows 2000 Server. C. only one edition of Windows Server D. enterprise edition server operating systems only. A. 128 MB B. 256 MB C. 1 GB D. 3 GB A. priority. B. host group. C. deployed poliies. D. operating system. E. aess ontrol rules. A. GPOLICY B. GHNODE C. GRULESET D. GDEPLOYMENT A. A desriptive base name B. A tag to indiate funtion C. A user or group definition D. An ampersand (&) to indiate the version

11 Questions Question 14 Whih Advaned Poliy Management Server database handles the distribution of POLICY? Question 15 You need to reate an environment to provision aounts to various endpoint systems. Whih produt do you integrate with CA ControlMinder? Question 16 Whih troubleshooting ation is used to lean an endpoint, and its status on the Deployment Map Server (DMS), from all poliy deployments and Advaned Poliy Management properties? Question 17 USER and XUSER lass properties an be (Choose three): Question 18 One of the benefits of CA ControlMinder file protetion is that you an: Question 19 Whih ontrols do PROGRAM lass reords implement? (Choose three) Question 20 To proess the rules in the HOST lass, whih lass must be disabled? Options A. DH B. EAR C. DMA D. DH WRITER A. CA IdentityMinder B. CA Single Sign-On C. CA GovernaneMinder D. CA Seurity Compliane Manager A. Reset B. Restore C. Redeploy D. Undeploy A. hidden. B. viewable only. C. publi or private. D. viewable and modifiable. A. synhronize UNIX and Windows poliy aess ontrol lists (ACLs). B. extend operating system ACLs to math poliy. C. synhronize MAC and Windows ACLs. D. exlude Superuser edits. A. Trojan bloking B. Integrity heking C. Integrity reovery D. SUID exeutable monitoring A. TCP B. GHOST C. HOSTNP D. NETWORK

12 Questions Question 21 When you are onfiguring Windows registry and servie protetion, whih wildard an you use to represent any sequene of zero or more haraters? Question 22 Whih user ativities an CA ControlMinder limit? Question 23 Before you an install UNIX Authentiation Broker on Linux, whih ommands do you need to run? (Choose two) Question 24 Whih statements about failover and reovery onepts are TRUE? (Choose two) Options A. Tilde (~) B. Asterisk (*) C. Ampersand (&) D. Forward slash (/) A. BIOS edits B. Registry edits C. Database edits D. Ative Diretory edits A. rpm U a-li i386.rpm B. uxpreinstall a <administrator> w <password> C. ustomize_uxauth_rpm w proeed <CM_rpm_filename> D. ustomize_uxauth_rpm w proeed <UNAB_rpm_filename> A. IT best pratie requires the prodution and disaster reovery (DR) systems to be in the same loation. B. Geographial separation is not onduive to standard high-availability (HA) lustering. C. Endpoint seurity depends on CA ControlMinder Enterprise Management server omponents being available. D. The CA ControlMinder server omponents may or may not be onsidered mission ritial, beause endpoints will ontinue enforing seurity even if Enterprise Management and Distribution Servers are offline.

13 Answers Question 1 = A and B Question 2 = A Question 3 = A, B, and C Question 4 = A, B, and C Question 5 = D Question 6 = B Question 7 = A, B, and D Question 8 = B Question 9 = A Question 10 = C Question 11 = B, C, and E Question 12 = B Question 13 = A and B Question 14 = A Question 15 = A Question 16 = A Question 17 = A, B, and D Question 18 = A Question 19 = A, B, and D Question 20 = A Question 21 = B Question 22 = B Question 23 = A and D Question 24 = B and D