A customer is moving from an on-premises to a public cloud deployment. What is the best and most cost-effective option to secure the server key?
A.
Install the Vault in the cloud the same way you would in an on-premises environment. Place the server key in a password protected folder on the operating system.
B.
Install the Vault in the cloud the same way you would in an on-premises environment. Purchase a Hardware Security Module to secure the server key.
C.
Install the Vault using the native cloud images and secure the server key using native cloud Key Management Systems.
D.
Install the Vault using the native cloud images and secure the server key with a Hardware Security Module.
The recommendation from Cyberark is to use KMS (as per the reference) however this would not be anywhere near as “cost-effective” as just storing them on the filesystem and securing them with NTFS permissions as per a normal on-prem deployment but my understanding is that this is strongly discouraged. There are also several difference between the cloud and on-prem installs therefore the statement “Install the Vault in the cloud the same way you would in an on-premises environment.” isn’t exactly true either. Therefore I'd say the answer is C.
https://docs.cyberark.com/PAS/Latest/en/Content/PAS%20Cloud/ChangeServerKeys-cloud.htm#:~:text=To%20ensure%20the%20security%20of%20the%20keys%20in%20AWS%2C%20it%20is%20recommended%20to%20follow%20AWS%20best%20practices%20and%20encrypt%20them%20with%20KMS.
You would use CAVaultManager.exe ChangeAwsKeys to make new keys and store in the cloud.
https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/13.0/en/Content/PAS%20Cloud/ChangeServerKeys-cloud.htm#ChangetheserverkeyonthePrimaryVault
The answer is C. https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/12.6/en/Content/PAS%20Cloud/ChangeServerKeys-cloud.htm?tocpath=Installation%7CInstall%20Privileged%20Access%20Manager%20-%20Self-Hosted%C2%A0in%20a%20cloud%20environment%7CInstall%20the%20Digital%20Vault%20on%20the%20cloud%7C_____14
This section is not available anymore. Please use the main Exam Page.PAM-SEN Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Cavdog
7Â months, 3Â weeks agoCavdog
7Â months, 3Â weeks agoCavdog
7Â months, 3Â weeks agoCavdog
7Â months, 3Â weeks agopamlover
9Â months, 2Â weeks agoFabri59
11Â months, 1Â week agomarcosneves
1Â year agoRiaan_M
1Â year agopenuelaandy
1Â year, 1Â month ago