GUARD: CyberArk Guardian

By CyberArk · Question Mode

QuestionQ43

No official GUARD exam topic/domain breakdown or percentage weightings were publicly available on CyberArk’s official certification pages I could verify

You are deploying PAM for a globally distributed organization with locations in England (UK), Boston (USA), and Hong Kong (ROC).

Each location has two physically separated data centers for disaster mitigation. England DC 1 has been designated as the Primary DC. Components will be scaled horizontally where needed in later phases, and all DCs can communicate with one another.

The solution must provide:

  • Resilient access to target systems
  • A highly resilient primary location
  • Recovery from all locations
  • Global resilience to outages
  • A single Master Policy governing the solution

Load balancing is possible between DCs in the same region.

What is the minimum required to meet these requirements?

Explanation

A single active Vault maintains one authoritative Master Policy, while DR Vaults provide replicated recovery capability. A DR Vault in UK DC 2 makes the primary UK location resilient to loss of UK DC 1. DR Vaults in the USA and ROC provide regional recovery, and PVWA and PSM instances across each region’s two data centers provide resilient user access and same-region load balancing. One CPM at the primary site and one in each remote region is sufficient; duplicating CPM and DR Vault instances in every data center is not the minimum design.

Community Discussion

No comments yet. Be the first to start the discussion!