CAD CAD Disaster Recovery & High Availability 2

Question 1

In a CyberArk cluster (high-availability) setup, which component provides load balancing and failover for PVWA connections?

Accepted Answer

An external load balancer (e.g., F5, HAProxy)

Answer

An external load balancer is placed in front of multiple PVWA nodes to distribute user connections and provide failover for the web interface tier.

Question 2

What happens to active PSM sessions during a CyberArk primary Vault failover to the DR Vault?

Accepted Answer

Active sessions are terminated and users must reconnect

Answer

Active PSM sessions are dropped during a Vault failover; users must re-authenticate and initiate new sessions once the DR Vault is promoted.

Question 3

Which CyberArk configuration parameter in Vault.ini defines the list of Vault cluster node addresses for high availability?

Accepted Answer

ClusterVaults

Answer

The ClusterVaults parameter in Vault.ini lists all node IP addresses in a Vault cluster, enabling clients to discover and connect to any available node.

Question 4

In a CyberArk HA environment, which Vault component manages the distribution of requests across multiple Vault cluster nodes?

Accepted Answer

CyberArk Cluster Vault Manager (CVM)

Answer

The CyberArk Cluster Vault Manager (CVM) coordinates node membership, heartbeat monitoring, and request routing across Vault cluster nodes.

Question 5

What is the minimum number of Vault nodes recommended in a CyberArk Cluster Vault Manager (CVM) deployment to avoid split-brain scenarios?

Accepted Answer

3

Answer

A minimum of 3 nodes is recommended in a CVM cluster to achieve quorum and prevent split-brain, where two equal partitions each claim to be primary.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD CAD Disaster Recovery & High Availability 2