CA Privileged Access Manager 3.x Proven Implementation Professional Exam (CAT-661) Study Guide Version 1.0

Size: px

Start display at page:

Download "CA Privileged Access Manager 3.x Proven Implementation Professional Exam (CAT-661) Study Guide Version 1.0"

Godwin Strickland
5 years ago
Views:

1 Exam (CAT-661) Study Guide Version 1.0

2 PROPRIETARY AND CONFIDENTIAL INFMATION 2018 CA. All rights reserved. CA onfidential & proprietary information. For CA, CA Partner and CA Customer use only. No unauthorized use, opying or distribution. All names of individuals or of ompanies referened herein are fititious names used for instrutional purposes only. Any similarity to any real persons or businesses is purely oinidental. All trademarks, trade names, servie marks and logos referened herein belong to their respetive ompanies. These Materials are for your informational purposes only, and do not form any type of warranty. The use of any software or produt referened in the Materials is governed by the end user s appliable liense agreement. CA is the manufaturer of these Materials. Provided with Restrited Rights.

3 The CA Tehnologies Certifiation Program is designed to measure your skills, knowledge, and expertise in managing, administering, installing, onfiguring and implementing selet CA Tehnologies produts for omplete and optimized IT solutions. With CA ertifiations, management teams will have peae of mind that knowledgeable professionals are handling their CA Tehnologies appliations. Protored by a third party vendor, KryterionOnline, CA Tehnologies ertifiations objetively validate the ompetenies of a projet team whether that team is your in-house staff, CA Tehnologies Professional Servies, or a CA Tehnologies partner. The aim of this doument is to help you prepare for the CA Privileged Aess Manager 3.x Exam. Make sure that you familiarize yourself with the ontent areas tested. Your best path to suess is to attend the exam prep ourse(s). You may also find it helpful to review the produt doumentation at and to partiipate in CA Global User Community forums at The experiene gained from taking ourses and using the produt will help you: Gain a omprehensive understanding of the produt or solution Inrease the likelihood of passing the exam on your first attempt The Exam Experiene You an register to take an online protored exam from your home or offie using Kryterion s Online Protoring (OLP) Servies, or you an take an on-site protored exam at a Kryterion testing enter. If you hoose to take an online protored exam, you will need Internet aess, an external web amera, and a omputer that meets speifi hardware and software requirements. For answers to frequently asked questions about registering for exams, loations, on-site and virtual protoring, OLP equipment requirements, anellation and re-sheduling poliies and more, read our FAQs at n-faq.aspx. CA employees may also go here for more information: Professional Exam Details Produt release: Major release listed in the title; Inludes subsequent point releases Reertifiation: There is no annual requirement to reertify for the same release of a produt. For eah major produt release, an updated exam will be available for reertifiation. Number of items = 50 Item types = Multiple hoie, inluding multiple response questions Time to omplete test: 90 minutes Passing sore is 70% Attempts Permitted: You may register for your first retake immediately. For subsequent retakes you are required to wait at least thirty (30) alendar days from the date of your last attempt. Read the online FAQs for details.

4 Only qualified andidates who demonstrate ompeteny by suessfully passing the CA Tehnologies ertifiation exam will be awarded ertifiation redentials. Prospetive ertifiation andidates are enouraged to prepare for the exam using the Exam Study Guide and other materials available on the Certifiation from CA Tehnologies website. To safeguard the integrity of the ertifiation program, CA Tehnologies requires all andidates to behave in an ethial manner and to omply with the rules of the third-party test enter for on-site protoring and on-line protoring. The validity of the ertifiation program depends on the exam ontent remaining seure and undislosed to other potential ertifiation andidates. CA Tehnologies will not tolerate heating, fraud, or misondut, whih inludes but is not limited to the following: Obtaining, whether through purhase or otherwise aquiring, unauthorized exam preparation materials from any non-ca website Obtaining, whether through purhase or otherwise aquiring, unauthorized exam questions from any non-ca website, inluding brain dump websites Aquiring or attempting to aquire exam questions through online ommunities, hat rooms, sreen apture software, forums, and soial networking sites Aquiring or attempting to aquire exam ontent through CA Subjet Matter Experts, CA Support Staff, or CA Certified Professionals Using or attempting to use a proxy to sit for the exam in your plae Taking or attempting to take an exam for someone else Reeiving or giving assistane during an exam Sharing exam questions or answers with a potential ertifiation andidate Violating testing enter rules Falsifying a diploma or sore report Using a CA Tehnologies ertifiation logo or redential to whih you are not entitled CA Tehnologies reserves the right to take any ations it deems reasonably appropriate in the ase of suspeted misondut or violation of the terms of the Non-Dislosure Agreement, inluding, but not limited to, anelling an exam result, revoking exam or ertifiation status, terminating use of the Designation, requiring a andidate to retake an exam, banning a andidate from the ertifiation program, and reporting misondut to the andidate s employer. CA Tehnologies onsiders heating a serious offense that warrants disiplinary ation, up to and inluding termination of employment.

Areas of Study support.a.om Experiene Prior Knowledge Best Praties youtube.om/atehnologies developer.a.om doops.a.om ommunities.a.om wiki.a.om Use Cases & Senarios Pratial Appliation of Course Conepts CA Privileged Aess Manager 3.

5 Areas of Study support.a.om Experiene Prior Knowledge Best Praties youtube.om/atehnologies developer.a.om doops.a.om ommunities.a.om wiki.a.om Use Cases & Senarios Pratial Appliation of Course Conepts CA Privileged Aess Manager 3.x Configuration Foundations 200 Instrutor-led Training / Virtual Learning (ILT/VL) 04PIM day Web-Based Training (WBT) 04PIM hours Dynami Lab 04PIM2043S 2 hours Searh the CA Eduation Portal for latest ourses, as they may not have been available at the time of this doument posting: Partners & Customers look here: Employees look here: For doumentation, Communities, and more visit: Register for the exam here: For other relevant ourseware, see the next page.

6 Areas of Study Note: Relevant ourseware is available in various formats. For more details, see the produt learning path. CA Privileged Aess Manager r3.x: Administration Foundations 200 (ILT/VL) 04PIM days CA Privileged Aess Manager 3.X: Getting Started with CA PAM Objets and Dependenies PIM20449 Dynami Labs 2.5 hours 04PIM20440 WBT 1 hour CA Privileged Aess Manager 3.X: Manage Aess to Windows Servers PIM20459 Dynami Labs 1.5 hours 04PIM20450 WBT.5 hours CA Privileged Aess Manager 3.X: Manage Aess to UNIX/Linux Servers PIM2046S Dynami Labs 1.25 hours 04PIM20460 WBT.5 hours CA Privileged Aess Manager 3.X: Manage Aess to Web Portals PIM2047S Dynami Labs 1 hour 04PIM20470 WBT.5 hours CA Privileged Aess Manager 3.X: Manage Aess to RDP Published Appliations PIM2048S Dynami Labs 1.5 hours 04PIM20480 WBT.5 hours CA Privileged Aess Manager 3.X: Improve Seurity with Credential Management PIM2049S Dynami Labs 3 hours 04PIM20490 WBT 1 hour CA Privileged Aess Manager 3.X: Implement Command and Soket Filters PIM2050S Dynami Labs 1 hour 04PIM20500 elearning.5 hours CA Privileged Aess Manager 3.X: Use Aount Servies and Task Disovery Tools PIM3038S Dynami Labs 2 hours 04PIM30380 WBT 1 hour CA Privileged Aess Manager r3.x: Implement the Appliation to Appliation Client PIM3035S Dynami Lab 2 hours 04PIM30350 WBT 1 hour CA Privileged Aess Manager 3.X: Use the Transparent Logon Learn Tool PIM30390 WBT.5 hours CA Privileged Aess Manager r3.x: Use the Command Line Interfae Tool and Java API PIM3037S Dynami Labs.5 hours 04PIM30370 WBT.25 hours CA Privileged Aess Manager r3.x: Use the External API PIM3036S Dynami Labs 2 hours 04PIM30360 WBT 1 hour CA Privileged Aess Manager r3.x: Use the Management Console to Manage Large Installations PIM3040S Dynami Labs 2 hours 04PIM30400 WBT 1 hour

7 Exam objetives as they map to related ourseware and the body of knowledge, inluding perentage of exam devoted to topis. Related Content Exam Fous Understanding the Arhiteture and Features Configuring the Appliane Understanding Firewall Permissions Getting Started with CA PAM Objets and Dependenies Managing Aess to Windows Servers Managing Aess to Linux/UNIX Servers Managing Aess To Web Portals CA Privileged Aess Manager 3.x Configuration Foundations 200 (04PIM20431, 04PIM20430, 04PIM2043S) Arhiteture and Feature Overview Deployment Senarios Privileged Aess Manager Arhiteture and Flow CA Privileged Aess Manager 3.x Configuration Foundations 200 (04PIM20431, 04PIM20430, 04PIM2043S) Appliane Configuration Main Configuration CA Privileged Aess Manager 3.x Configuration Foundations 200 (04PIM20431, 04PIM20430, 04PIM2043S) Firewall Permissions CA Privileged Aess Manager r3.x: Administration Foundations 200 (04PIM20391) CA PAM Objets and Dependenies Components, Users, Servies, Aess Poliies Import Users and Devies with LDAP Groups CA Privileged Aess Manager 3.X: Getting Started with CA PAM Objets and Dependenies 200 (04PIM PIM20440) CA Privileged Aess Manager r3.x: Administration Foundations 200 (04PIM20391) Manage Aess to Windows Servers CA Privileged Aess Manager 3.X: Manage Aess to Windows Servers 200 (04PIM PIM20450) CA Privileged Aess Manager r3.x: Administration Foundations 200 (04PIM20391) Manage Aess to Linux/UNIX Servers CA Privileged Aess Manager 3.X: Manage Aess to UNIX/Linux Servers 200 (04PIM2046S 04PIM20460) CA Privileged Aess Manager r3.x: Administration Foundations 200 (04PIM20391) Manage Aess To Web Portals CA Privileged Aess Manager 3.X: Manage Aess to Web Portals 200 (04PIM2047S 04PIM20470) 8% 8% 2% 16% 8% 4% 4%

8 Related Content Exam Fous Managing Aess to RDP Published Appliations Improving Seurity with Credential Management CA Privileged Aess Manager r3.x: Administration Foundations 200 (04PIM20391) Manage Aess to RDP Published Appliations CA Privileged Aess Manager 3.X: Manage Aess to RDP Published Appliations 200 (04PIM2048S 04PIM20480) 04PIM20391 CA Privileged Aess Manager r3.x: Administration Foundations 200 Improve Seurity with Credential Management CA Privileged Aess Manager 3.X: Improve Seurity with Credential Management 200 (04PIM2049S 04PIM20490) Implementing Command and Soket Filters 04PIM20391 CA Privileged Aess Manager r3.x: Administration Foundations 200 Implement Command and Soket Filters CA Privileged Aess Manager 3.X: Implement Command and Soket Filters 200 (04PIM2050S 04PIM20500) Implementing the Appliation to Appliation Client CA Privileged Aess Manager r3.x: Implement the Appliation to Appliation Client 300 (04PIM3035S or 04PIM30350) 6% 14% 6% 4% Using the External API CA Privileged Aess Manager r3.x: Use the External API 300 (04PIM3036S or 04PIM30360) Using Aount Servies and Task Disovery CA Privileged Aess Manager 3.X: Use Aount Servies and Task Disovery Tools 300 Tools (04PIM3038S or 04PIM30380) Understanding Reent Enhanements Doumentation and Field Experiene Reent Enhanements LDAP Over SSL (LDAPS) Support Compat Your Database Sheduled Purge of Session Reordings Multi-Site Clustering 4% 8% 8%

9 Sample Certifiation These sample questions are very similar to the questions in the atual exam. Some questions may inlude several orret options. Questions Options Question 1 In CA PAM, seurity information and event management systems (SIEM) are leveraged for storing: A. redential data. B. poliy engine data. C. session applet data. D. reorded session and log data. Question 2 CA PAM supports Seurity Assertion Markup Language (SAML) 2.0 as an authentiation option. What does this enable you to do? Question 3 You need a valid repository on CA PAM to store graphial session reording files. What an you use? (Choose three) Question 4 If a CA PAM implementation uses a Network Time Protool (NTP) servie: Question 5 When you are onfiguring the date and time settings for a CA PAM appliane, you CANNOT: Question 6 By default, whih port does CA PAM use to ommuniate with the Windows Proxy? A. Integrate CA PAM as a Servie Provider (SP) for an Identity Provider (IdP) suh as CA Single Sign-On (CA SSO). B. Use CA PAM as an IdP to onnet to a rih lient ating as an SP. C. Operate as an IdP or an SP for a web portal SSO onnetion. D. Operate as an IdP only for a web portal SSO onnetion. A. Amazon S3 B. Google Drive C. Network File System (NFS) D. The loal CA PAM appliane E. Common Internet File System (CIFS) A. any aessible NTP servie an be used. B. the NTP servie must be hosted in an FCC offie. C. the NTP servie must be hosted by CA Network servies. D. the NTP servie must be hosted on the same network as CA PAM. A. synhronize the date and time with a ustomized sript output. B. manually set the date and time in the CA PAM UI. C. set a loal Network Time Protool (NTP) server. D. set an international NTP server. A. 443 B C D

10 Questions Question 7 What an you do after you load an Ative Diretory group from the CA PAM UI? (Choose two) Question 8 By default, whih role is assigned to CA PAM users? Question 9 In CA PAM, the purpose of roles is to enable users to perform permitted ations in the: Question 10 In CA PAM, whih elements are required parts of an aess poliy? (Choose three) Question 11 In CA PAM, what are the aess time rules applied to? Question 12 In CA PAM, session reording: Question 13 In CA PAM 3.x, from whih menu does an administrator start to import devies from LDAP? Options A. Delete the group. B. Refresh the group. C. Add a user to the group. D. Delete a user from the group. A. Monitor B. Standard User C. Troubleshooter D. User/Group Manager A. CA PAM UI. B. CA PAM appliane bak end. C. target devies that they aess through CA PAM. D. appliations that are installed on the target devies that they aess through CA PAM. A. User B. Devie C. Servie D. Password E. Agent name A. Users B. Poliy C. Devies D. Devie groups A. stores files loally on the CA PAM appliane. B. is supported for onsole login to target devies. C. is supported for RDP, SSH, and Web aess methods. D. produes files that an be played on ommerially available media players. A. Import > Devies B. Import > Devie Group C. Devies > Manage Devies D. Devies > Manage Devie Groups

11 Questions Question 14 In CA PAM, devie autodisovery: Question 15 What is defined in an SSH Key Pair poliy? Question 16 What is the purpose of a target group? Question 17 When you reate a dynami target group, whih fields are available for onfiguring dynami filters? (Choose three) Question 18 You an set a Change Password On Connetion End option for a password view poliy. If set, a password that is used to establish a onnetion, suh as RDP or SSH, is automatially hanged. When is the hange implemented? (Choose two) Question 19 Windows servies and sheduled tasks are disovered through whih target onnetor? Question 20 When you upgrade from CA PAM 2.x to 3.x, whih major hange will you notie in the UI? (Choose two) Options A. only disovers WEB devie types. B. only disovers SSH and RDP devie types. C. has no limitation on the devie types that an be disovered. D. only disovers servies devie types suh as Mirosoft SQL Server and Orale. A. A key type and length B. A dual authorization list C. A key pair rotation poliy D. A master private key for managing keys A. To define the systems a user an auto-onnet to B. To define the aounts that an be assigned in a poliy C. To define who will reeive an on an aount view poliy D. To define the aounts and appliations available for use in a role A. Host Name B. Servie Name C. Aount Name D. Appliation Type A. When the onnetion times out B. Immediately after the onnetion is losed C. When the CA PAM session is losed by the user D. Immediately before the next onnetion to the server A. AWS Proxy B. Windows Loal C. Windows Proxy D. Windows Domain Servies A. The CA PAM Client is now mandatory of most tasks. B. A unified interfae to manage devie and redentials C. An improved Aess page, whih inludes the ability to filter D. The ability to hange the look and feel by using ustom themes

12 Answers Question 1 = D Question 2 = C Question 3 = A, C, and E Question 4 = A Question 5 = A Question 6 = B Question 7 = A and B Question 8 = B Question 9 = A Question 10 = A, B, and C Question 11 = A Question 12 = C Question 13 = D Question 14 = C Question 15 = A Question 16 = D Question 17 = A, C, and D Question 18 = A and B Question 19 = C Question 20 = B and C

13 Register for the Exams To register and pay for any of the ertifiation exams, visit our third party testing partner, Kryterion Online. Eah exam attempt osts $150. Payment and vouhers are only aepted during registration and sheduling on the third party website. We are not able to proess payment for exams on the LMS Training Portal.

CA API Management 8.x Implementation Proven Professional Exam (CAT-560) Study Guide Version 1.1

CA API Management 8.x Implementation Proven Professional Exam (CAT-560) Study Guide Version 1.1 Exam (CAT-560) Study Guide Version 1.1 PROPRIETARY AND CONFIDENTIAL INFORMATION 2016 CA. All rights reserved. CA onfidential & proprietary information. For CA, CA Partner and CA Customer use only. No unauthorized