CyberArk Sentry – PAM — Question 40

You have been asked to limit a platform called “Windows_Servers” to safes called “WindowsDC1” and “WindowsDC2”. The platform must not be assigned to any other safe.
What is the correct way to accomplish this?

Answer options

• A. Edit the “Windows_Servers” platform, expand “Automatic Password Management”, then select General and modify “AllowedSafes” to be (WindowsDC1)|(WindowsDC2).
• B. Edit the “Windows_Servers” platform, expand “Automatic Password Management”, then select Options and modify “AllowedSafes” to be (Win*).
• C. Edit the “WindowsDC1” and “WindowsDC2” safes through Safe Management, Add “Windows_Servers” to the “AllowedPlatforms”.
• D. Log in to PrivateArk using an Administrative user, Select File, Server File Categories, Locate the category “WindowsServersAllowedSafes” and specify “WindowsDC1,WindowsDC2”.

Correct answer: A

Explanation

The correct answer is A because it directly modifies the 'AllowedSafes' setting for the 'Windows_Servers' platform to specifically include only 'WindowsDC1' and 'WindowsDC2'. Options B and C do not restrict the platform correctly, as B allows any safe starting with 'Win', and C modifies the safes instead of the platform. Option D does not address the platform's allowed safes but rather involves a different method of specifying safes, which is not what is being asked.