Exam CAU302 All QuestionsBrowse all questions from this exam
Question 21

In a Security Information and Event Management (SIEM) integration it is recommended to use the Fully Qualified Domain Name (FQDN) when specifying the

SIEM server address(es).

    Correct Answer: B

    In a Security Information and Event Management (SIEM) integration, using a Fully Qualified Domain Name (FQDN) for specifying the SIEM server addresses can introduce potential security risks and complications such as DNS spoofing. Therefore, it is recommended to use IP addresses instead for more stable and secure communication. Using FQDN is generally not recommended unless there is a specific operational justification and proper security measures are in place.

Discussion
43aa45aOption: B

It is POSSIBLE but NOT RECCOMENDED ! : https://docs.cyberark.com/pam-self-hosted/Latest/en/Content/PASIMP/DV-Integrating-with-SIEM-Applications.htm#Prerequisites

NLTOption: A

A is correct answer.

nereprezentativOption: A

Use DNS only if you have a business or operational justification. Make sure that you follow the Vault security standards. For more information, see Avoid using DNS on the Digital Vault Server.

Kaustav01Option: A

https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/Latest/en/Content/PASIMP/DV-Integrating-with-SIEM-Applications.htm