CyberArk Sentry – PAM — Question 20

A customer is moving from an on-premises to a public cloud deployment.
What is the best and most cost-effective option to secure the server key?

Answer options

• A. Install the Vault in the cloud the same way you would in an on-premises environment. Place the server key in a password protected folder on the operating system.
• B. Install the Vault in the cloud the same way you would in an on-premises environment. Purchase a Hardware Security Module to secure the server key.
• C. Install the Vault using the native cloud images and secure the server key using native cloud Key Management Systems.
• D. Install the Vault using the native cloud images and secure the server key with a Hardware Security Module.

Correct answer: C

Explanation

Option C is the best choice because it leverages the native cloud Key Management Systems, which are designed for security and cost-efficiency in cloud environments. Options A and B rely on traditional methods that may not be optimal in a cloud setting, while option D involves unnecessary expenses by using a Hardware Security Module instead of utilizing built-in cloud solutions.