Question 1

The security of the Vault Server is entirely dependent on the security of the network.

Options :

A : TRUE

B : FALSE

Answer: B

Question 2

A stand alone Vault server requires DNS services to operate properly.

Options :

A : TRUE

B : FALSE

Answer: B

Question 3

Which command should be executed to harden a Vault after registering it to Azure?

Options :

A : HardenAzureFW.ps1

B : ExecuteStage ./Hardening/HardeningConf.xml

C : HardenVaultFW.ps1

D : ExecuteStage ./PostInstallation/PostInstallation.xml

Answer: C

Question 4

What is a valid combination of primary and secondary layers of authentication to a company's two-factor authentication policy?

Options :

A : RSA SecurID Authentication (in PVWA) and LDAP Authentication

B : CyberArk Authentication and RADIUS Authentication

C : Oracle SSO (in PVWA) and SAML Authentication

D : LDAP Authentication and RADIUS Authentication

Answer: A

Question 5

To enable LDAP over SSL for a Vault when DNS lookups are blocked, which step must be completed?

Options :

A : Add the FQDN & IP details for each LDAP host into the local hosts file of the Vault server.

B : Configure an AllowNonStandardFWAddresses rule in DBParm.ini on the Vault to allow outbound TCP 53 to the organization’s DNS servers.

C : Ensure LDAP hosts added to the directory mapping configuration are defined using only IP addresses.

D : Set the ReferralsDNSLookup parameter value to “No” in the directory configuration.

Answer: A