CAD Setup 2 — Questions and Answers
Question 1: During CyberArk Vault installation, which port must be open for client-to-Vault communication by default?
- 443
- 1858 (Correct answer)
- 8080
- 3389
Correct answer: 1858
CyberArk Vault uses port 1858 (the Vault port) for client-to-Vault encrypted communication by default.
Question 2: What is the purpose of the PrivateArk Server service during CyberArk Vault setup?
- It manages Web Access sessions
- It is the core Vault service that handles all privileged data storage and access (Correct answer)
- It synchronizes passwords with the CPM
- It provides REST API access to the Vault
Correct answer: It is the core Vault service that handles all privileged data storage and access
The PrivateArk Server service is the core Vault engine responsible for all privileged account data storage, encryption, and access control.
Question 3: When configuring CyberArk PVWA (Password Vault Web Access), what is required before users can log in through the web interface?
- The CPM must be installed first
- The PVWA must be registered with the Vault (Correct answer)
- A DR Vault must be configured
- The PSM must be running
Correct answer: The PVWA must be registered with the Vault
Before PVWA can function, it must be registered with the Vault so the Vault recognizes and trusts connections from the PVWA server.
Question 4: Which database is used by default to store PVWA application data and configuration in CyberArk?
- MySQL
- Oracle
- Microsoft SQL Server (Correct answer)
- PostgreSQL
Correct answer: Microsoft SQL Server
CyberArk PVWA uses Microsoft SQL Server as its backend database for storing application data and configuration settings.
Question 5: During initial CyberArk setup, what is the 'Master' user account used for?
- Day-to-day Vault administration
- Emergency access and initial Vault configuration (Correct answer)
- Connecting the CPM to the Vault
- Managing LDAP directory integration
Correct answer: Emergency access and initial Vault configuration
The Master user is a highly privileged emergency account used only during initial Vault setup and break-glass scenarios, not for routine administration.
Question 6: What must be configured in CyberArk's Vault.ini file before starting the Vault service for the first time?
- LDAP server addresses
- Vault IP address and port settings (Correct answer)
- CPM account credentials
- PVWA SSL certificate path
Correct answer: Vault IP address and port settings
The Vault.ini file must contain the Vault's own IP address and port configuration before the Vault service can initialize correctly.
Question 7: When installing the CyberArk Central Policy Manager (CPM), which account type does it require to manage accounts on target systems?
- A Vault administrator account
- A Windows local administrator service account (Correct answer)
- A read-only domain user account
- A shared team account
Correct answer: A Windows local administrator service account
The CPM service requires a Windows local administrator service account on the CPM server to operate and connect to target systems for password management.
CAD Setup 2
During CyberArk Vault installation, which port must be open for client-to-Vault communication by default?