CyberArk Sentry – PAM — Question 63

Which statement is correct about CPM behavior in a distributed Vault environment?

Answer options

• A. CPMs should only access the primary Vault. When it is unavailable, CPM cannot access any Vault until another Vault is promoted as the new primary Vault.
• B. CPMs should access only the satellite Vaults.
• C. CPMs should only access the primary Vault. When it is unavailable, CPM cannot access any Vault until the original primary Vault is operational again.
• D. CPM should access all Vaults - primary and the satellite.

Correct answer: A

Explanation

The correct answer is A because CPMs are designed to interact only with the primary Vault, and if it becomes unavailable, they cannot communicate with any Vault until a new primary is established. Options B and D are incorrect as they suggest accessing satellite Vaults, which is not the intended behavior for CPMs. Option C is misleading because it implies that CPMs can only wait for the original primary to be back online, rather than promoting another primary.