CyberArk Sentry – Privileged Cloud — Question 75

What is recommended when applying GPO (Group Policy Object) hardening for in-domain PSM servers?

Answer options

• A. Apply the GPO provided by CyberArk onto the servers after other GPOs.
• B. Apply the GPO hardening to all hosts that end-users will connect to through the PSM.
• C. After installation, remove the PSM servers from the domain to maximize security.
• D. Place the servers which have PSM installed into a dedicated organizational unit (OU).

Correct answer: D

Explanation

The correct answer is D because placing PSM servers in a dedicated OU allows for more granular control over the GPOs applied to them, enhancing security. Options A and B do not specifically address the need for a dedicated OU, and option C is not recommended as removing servers from the domain could hinder their operational functionality and management.