CyberArk PAM-DEF 問題集

質問 1：
The vault supports Role Based Access Control.
A. FALSE
B. TRUE
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
SAFE Authorizations may be granted to____________.
Select all that apply.
A. Vault Users
B. LDAP Users
C. LDAP Groups
D. Vault Group
正解：A,B,C,D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
When a DR Vault Server becomes an active vault, it will automatically fail back to the original state once the Primary Vault comes back online.
A. False; this is not possible
B. True; this is the default behavior
C. True, if the AllowFailback setting is set to "yes" in the padr.ini file
D. True, if the AllowFailback setting is set to "yes" in the dbparm.ini file
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
VAULT authorizations may be granted to_____.
A. Vault Users
B. LDAP Users
C. Vault Groups
D. LDAP Groups
正解：A,B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
In a default CyberArk installation, which group must a user be a member of to view the "reports" page in PVWA?
A. Operators
B. PVWAReports
C. ReportUsers
D. PVWAMonitor
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Match the Status of Service on a DR Vault to what is displayed when it is operating normally in Replication mode.

正解：

Explanation
CyberArk Hardened Windows Firewall -> Running
PrivateArk Database -> Running
PrivateArk Server -> Stopped
CyberArk Vault Disaster Recovery -> Running
CyberArk Event Notification Engine -> Stopped
* Comprehensive Explanation: A DR Vault is a Vault that acts as a standby replica of the Primary Vault and is ready to take its place when the Primary Vault is unavailable. The DR Vault operates in Replication mode, which means it continuously replicates the data and metadata from the Primary Vault.
In Replication mode, the following services have the following status on the DR Vault:
* Cyber-Ark Hardened Windows Firewall: This service provides firewall protection for the Vault server.
It should be running on the DR Vault to ensure security.
* PrivateArk Database: This service manages the database that stores the metadata of the Vault. It should be stopped on the DR Vault, because the database is not active in Replication mode. The database is only activated when the DR Vault switches to Production mode.
* PrivateArk Server: This service manages the Vault server and its communication with other components. It should be stopped on the DR Vault, because the Vault server is not active in Replication mode. The Vault server is only activated when the DR Vault switches to Production mode.
* CyberArk Vault Disaster Recovery: This service manages the replication process between the Primary Vault and the DR Vault. It should be running on the DR Vault to ensure data synchronization and readiness for failover.
* Cyber-Ark Event Notification Engine: This service manages the event notifications and alerts for the
* Vault. It should be stopped on the DR Vault, because the event notifications are not relevant in Replication mode. The event notifications are only activated when the DR Vault switches to Production mode.
References: Primary-DR environment - CyberArk, Replicate the Primary Vault to the Satellite Vaults - CyberArk