CAD Digital Vault Server Administration 3 — Questions and Answers
Question 1: What CyberArk utility is used to perform an offline integrity check of the Digital Vault database?
- CAVaultManager.exe (Correct answer)
- PrivateArk Client
- PAReplicate.exe
- CADiagnose.exe
Correct answer: CAVaultManager.exe
CAVaultManager.exe provides administrative functions including database integrity verification and is used for offline Vault management tasks.
Question 2: Which CyberArk safe is used to store the credentials of the built-in Vault administrator account?
- VaultInternal (Correct answer)
- PasswordManager
- System
- Notification Engine
Correct answer: VaultInternal
The VaultInternal safe stores critical Vault internal objects including built-in administrator account configurations.
Question 3: How many Vault servers are required in a CyberArk high-availability (HA) Disaster Recovery configuration?
- 1 primary only
- 1 primary + 1 DR replica (Correct answer)
- 3 servers minimum
- 2 primaries in active-active mode
Correct answer: 1 primary + 1 DR replica
CyberArk's standard HA/DR setup requires one primary Vault and one DR replica that continuously replicates data from the primary.
Question 4: What is the function of PAReplicate.exe in a CyberArk environment?
- Replicates safe permissions across multiple PVWA servers
- Synchronizes data from the primary Vault to the DR Vault (Correct answer)
- Copies password policies between safes
- Mirrors CPM configurations across multiple vaults
Correct answer: Synchronizes data from the primary Vault to the DR Vault
PAReplicate.exe is the CyberArk replication utility that synchronizes Vault data from the primary server to the disaster recovery Vault server.
Question 5: In a CyberArk Digital Vault, what does the 'SafesActivity.log' file track?
- System-level OS events on the Vault server
- All access and activity events within Vault safes (Correct answer)
- Network traffic to and from the Vault
- Replication status between primary and DR vaults
Correct answer: All access and activity events within Vault safes
SafesActivity.log records detailed audit events for all safe-level operations including file retrievals, additions, and access by users.
Question 6: When configuring the Vault's firewall, which inbound port must be opened to allow CyberArk components to connect to the Digital Vault?
- 8080
- 443
- 1858 (Correct answer)
- 22
Correct answer: 1858
Port 1858 must be open inbound on the Vault firewall to allow PVWA, CPM, PSM, and other CyberArk components to communicate with the Vault.
Question 7: What is the maximum number of concurrent connections the CyberArk Digital Vault supports by default before tuning?
- 50
- 100
- 250 (Correct answer)
- 500
Correct answer: 250
By default, the CyberArk Digital Vault supports up to 250 concurrent connections, which can be tuned via the DBParm.ini MaxConcurrentConnections parameter.
CAD Digital Vault Server Administration 3
What CyberArk utility is used to perform an offline integrity check of the Digital Vault database?