CyberArk PAM-CDE Recertification — Question 74

You have been asked to limit a platform called "Windows_Servers" to safes called "WindowsDC1" and "WindowsDC2". The platform must not be assigned to any other safe. What is the correct way to accomplish this?

Answer options

• A. Edit the "Windows_Servers" platform, expand "Automatic Password Management", then select General and modify "AllowedSafes" to be (WindowsDC1)|(WindowsDC2).
• B. Edit the "Windows_Servers" platform, expand "Automatic Password Management", then select Options and modify "AllowedSafes" to be (Win*).
• C. Edit the "WindowsDC1" and "WindowsDC2" safes through Safe Management. Add "Windows_Servers" to the "AllowedPlatforms".
• D. Log in to PrivateArk using an Administrative user, Select File, Server File Categories, Locate the category "WindowsServersAllowedSafes" and specify "WindowsDC1,WindowsDC2".

Correct answer: A

Explanation

The correct answer is A because it directly modifies the platform's settings to restrict access to only the specified safes. Option B incorrectly uses a wildcard that allows more safes than intended, while Options C and D suggest modifying safes or server categories instead of the platform settings, which does not meet the requirement.