CAD Digital Vault Server Administration 2 — Questions and Answers
Question 1: Which CyberArk service is responsible for managing the encryption keys used by the Digital Vault?
- Vault Service
- ENE (Event Notification Engine)
- CyberArk Vault Key Management Service
- PrivateArk Server (Correct answer)
Correct answer: PrivateArk Server
The PrivateArk Server service handles core Vault operations including encryption key management for stored credentials.
Question 2: What is the default port used for communication between the CyberArk PVWA and the Digital Vault?
- 443
- 1858 (Correct answer)
- 8080
- 3389
Correct answer: 1858
Port 1858 is the proprietary port used for communication between CyberArk components and the Digital Vault.
Question 3: During a Digital Vault backup, which file type contains the actual encrypted safe data?
- .rdb files (Correct answer)
- .log files
- .safe files
- .bak files
Correct answer: .rdb files
The .rdb (Recoverable Database) files contain the encrypted safe contents and are critical for Vault backup and restore.
Question 4: What is the purpose of the Vault's 'Operator CD' in a CyberArk deployment?
- To perform software updates to the Vault
- To store the Vault encryption keys for disaster recovery (Correct answer)
- To provide remote administrative access to the Vault
- To run the initial Vault installation wizard
Correct answer: To store the Vault encryption keys for disaster recovery
The Operator CD stores the Vault master encryption keys and is required for disaster recovery scenarios where the Vault must be restored.
Question 5: Which log file should an administrator review to investigate failed authentication attempts to the Digital Vault?
- italog.log
- vault.log (Correct answer)
- pvwaapp.log
- dbparm.ini
Correct answer: vault.log
The vault.log file records all Vault-level events including authentication successes and failures.
Question 6: What is the recommended method to safely stop the CyberArk Digital Vault service for maintenance?
- Use Windows Task Manager to end the PrivateArk Server process
- Run 'net stop PrivateArk Server' from command line
- Use the PrivateArk Server console Stop button or CAVaultManager.exe (Correct answer)
- Reboot the Vault server directly
Correct answer: Use the PrivateArk Server console Stop button or CAVaultManager.exe
CyberArk recommends using CAVaultManager.exe or the PrivateArk Server console to gracefully stop the Vault, ensuring data integrity.
Question 7: In CyberArk, what does the 'DBParm.ini' file primarily control?
- PVWA web server configuration
- Digital Vault server parameters and tuning settings (Correct answer)
- CPM password policy rules
- PSM session recording settings
Correct answer: Digital Vault server parameters and tuning settings
DBParm.ini is the main configuration file for the Digital Vault server, containing parameters for performance, security, and operational behavior.
CAD Digital Vault Server Administration 2
Which CyberArk service is responsible for managing the encryption keys used by the Digital Vault?