QuestionQ18

Infrastructure and Network Architecture

Which of these protocols must be installed on a standalone Vault server? Check all that apply.

Choose two
  • A Client for Microsoft Networks
  • B QoS Packet Scheduler
  • C File and Printer Sharing for Microsoft Networks
  • D Internet Protocol version 4 (TCP/IPv4)
  • E NIC Teaming Driver, if applicable
Explanation

As part of CyberArk Vault server hardening, the network adapter is configured with only the minimal set of protocols needed for the Vault to communicate: Internet Protocol Version 4 (TCP/IPv4) must remain bound to the adapter since the Vault requires IP connectivity, and the NIC Teaming Driver must be present when the server's network adapters are configured in a team for redundancy, while other Windows networking components such as File and Printer Sharing, Client for Microsoft Networks, and QoS Packet Scheduler are removed because the standalone Vault server does not need them and leaving them enabled would needlessly widen the server's attack surface.

Community Discussion

No comments yet. Be the first to start the discussion!