CAD CAD Disaster Recovery & High Availability 1 — Questions and Answers
Question 1: In a CyberArk high-availability deployment, what is the role of the Disaster Recovery Vault?
- It serves as the primary authentication provider
- It maintains a real-time replica of the primary Vault and activates if the primary fails (Correct answer)
- It manages password rotation for all accounts
- It hosts the PVWA interface as a failover
Correct answer: It maintains a real-time replica of the primary Vault and activates if the primary fails
The Disaster Recovery Vault continuously replicates data from the primary Vault and can be promoted to become the active Vault if the primary is unavailable.
Question 2: Which replication mode does CyberArk use by default between the primary Vault and the DR Vault?
- Asynchronous replication
- Synchronous replication (Correct answer)
- Scheduled batch replication
- Log-shipping replication
Correct answer: Synchronous replication
CyberArk replicates data from the primary to the DR Vault synchronously, ensuring zero data loss if failover is required.
Question 3: What is the maximum recommended network latency between the primary CyberArk Vault and its DR Vault to ensure synchronous replication performance?
- 5 ms
- 20 ms (Correct answer)
- 50 ms
- 100 ms
Correct answer: 20 ms
CyberArk recommends no more than 20 ms round-trip latency between the primary and DR Vault to maintain acceptable synchronous replication performance.
Question 4: During a CyberArk DR failover, which administrative action must be performed to promote the DR Vault to active status?
- Restart the PrivateArk Server service on the DR Vault
- Run the Failover command from the PrivateArk Client on the DR Vault (Correct answer)
- Edit the DBParm.ini file and set DR=Active
- Enable the DR Vault in PVWA Administration settings
Correct answer: Run the Failover command from the PrivateArk Client on the DR Vault
An administrator runs the Failover command from the PrivateArk Client connected to the DR Vault to promote it to active primary status.
Question 5: In CyberArk, what file contains replication configuration parameters for the Disaster Recovery Vault, including the primary Vault address?
- Vault.ini
- DBParm.ini
- PAReplicate.ini
- PADR.ini (Correct answer)
Correct answer: PADR.ini
PADR.ini is the configuration file for the CyberArk DR Vault, specifying the primary Vault address, replication credentials, and related settings.
Question 6: Which CyberArk service on the DR Vault machine handles the ongoing replication process from the primary Vault?
- PrivateArk Server
- CyberArk Vault Disaster Recovery (Correct answer)
- PrivateArk Database
- CyberArk Event Notification Engine
Correct answer: CyberArk Vault Disaster Recovery
The 'CyberArk Vault Disaster Recovery' Windows service runs on the DR Vault and continuously pulls replicated data from the primary Vault.
CAD CAD Disaster Recovery & High Availability 1
In a CyberArk high-availability deployment, what is the role of the Disaster Recovery Vault?