CyberArk Sentry – PAM — Question 51

Which statement is correct about a post-install hardening?

Answer options

• A. The Vault must be hardened during the Vault installation process.
• B. After the Vault server is installed, you must join the server to the Enterprise Domain and reboot the host.
• C. It is executed after Vault installation by running CAVaultHarden.exe and hardening options can be edited by changing the Hardening.ini file.
• D. If it is mandated by an organization’s IT governance, you do not have to execute Vault hardening; however, server hardening cannot be reversed.

Correct answer: C

Explanation

Option C is correct because it accurately describes the post-install hardening process, which involves running CAVaultHarden.exe and modifying the Hardening.ini file. Option A is incorrect as hardening is specifically a post-installation task. Option B incorrectly suggests a requirement that is not part of the hardening process, and option D misrepresents the flexibility of executing Vault hardening based on IT governance.