Examice

Exam PAM-SEN All QuestionsBrowse all questions from this exam

Question 53

Which statement is correct about a post-install hardening?

The Vault must be hardened during the Vault installation process.

After the Vault server is installed, you must join the server to the Enterprise Domain and reboot the host.

It is executed after Vault installation by running CAVaultHarden.exe and hardening options can be edited by changing the Hardening.ini file.

If it is mandated by an organization’s IT governance, you do not have to execute Vault hardening; however, server hardening cannot be reversed.

Correct Answer: C

Post-install hardening for Vault is performed after the installation by executing the CAVaultHarden.exe utility. The hardening options can be modified by changing the settings in the Hardening.ini file. This process is distinct from any hardening done during the installation itself and is specifically designed to strengthen security configurations post-installation.

Discussion

laternak26Option: C

The questions is about post-install hardening, so C is the right answer, because that is how post-install hardening is done, if not completed during installation. https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/Utility-CAVaultHarden.htm

CavdogOption: C

Another weird one, C. appears to be the most sensible answer however I haven’t seen any indication that it is impossible to run it unhardened (not that that would make much sense but still) and once it has been hardened the process is definitely irreversible as per the reference so D. may also technically be possible (albeit very dumb) but that not withstanding I think C. would be the correct answer. https://docs.cyberark.com/PAS/Latest/en/Content/PASIMP/Utility-CAVaultHarden.htm#:~:text=Server/Hardening%20folder.-,Run%20the%20CAVaultHarden%20utility,-as%20an%20administrator

Att84Option: A

default is A: https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/13.0/en/Content/PAS%20INST/Install-the-CyberArk-Vault-Normal-Installation.htm

penuelaandyOption: A

https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/Security/CyberArk-DV-Server-Security-Standards-Requirements.htm?TocPath=Security%7CDigital%20Vault%20Security%20Standard%7C_____1#:~:text=The%20Digital%20Vault%20Server%20operating%20system%20must,the%20Vault%20and%20your%20environment%20at%20risk.

Fabri59Option: A

The answer is A. https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/12.6/en/Content/PAS%20INST/Install-the-CyberArk-Vault-Normal-Installation.htm?tocpath=Installation%7CInstall%20PAM%20-%20Self-Hosted%7CCyberArk%20Digital%20Vault%20installation%7CInstall%20a%20Primary-DR%20Environment%7C_____3