Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CyberArk PAM-DEF Exam - Topic 4 Question 70 Discussion

Which certificate type do you need to configure the vault for LDAP over SSL?
A) the CA Certificate that signed the certificate used by the External Directory
B) a CA signed Certificate for the Vault server
C) a CA signed Certificate for the PVWA server
D) a self-signed Certificate for the Vault

CyberArk PAM-DEF Exam - Topic 4 Question 70 Discussion

Actual exam question for CyberArk's PAM-DEF exam
Question #: 70
Topic #: 4
[All PAM-DEF Questions]

Which certificate type do you need to configure the vault for LDAP over SSL?

Show Suggested Answer Hide Answer
Suggested Answer: A

To enable SSL-based encryption for LDAP integration, the Vault machine and the PVWA machine need to trust the certificate used by the External Directory. This can be achieved by importing the CA Certificate that signed the certificate used by the External Directory into the Windows certificate store on both the Vault and PVWA machines. This will facilitate an SSL connection between the Vault and the External Directory.Reference:Configure the Vault for LDAP,Configure LDAPS in CyberArk. What certificate I need to use?


by Franchesca at Mar 07, 2026, 09:51 AM

Limited Time Offer

25%

Off

Get Premium PAM-DEF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Onita
3 days ago
D seems risky. Self-signed certs aren't ideal for security.
upvoted 0 times
...
Beata
8 days ago
I lean towards A as well. It’s about the external directory's trust.
upvoted 0 times
...
Skye
13 days ago
I feel like B could be right too. Vault server needs a CA signed cert.
upvoted 0 times
...
Lenny
18 days ago
I think it's A. The CA Certificate is crucial for trust.
upvoted 0 times
...
Margurite
23 days ago
I’m not sure about D. Self-signed seems risky for production.
upvoted 0 times
...
Johnetta
28 days ago
I lean towards A too. Without the CA, how can we trust the connection?
upvoted 0 times
...
Phyliss
1 month ago
I feel like B makes more sense. The Vault server needs a CA signed cert.
upvoted 0 times
...
Emiko
1 month ago
I think it's A. The CA Certificate is crucial for SSL.
upvoted 0 times
...
Ellsworth
1 month ago
D seems too risky. Self-signed isn't secure enough for this.
upvoted 0 times
...
Melynda
2 months ago
C could be right too, but I lean towards A.
upvoted 0 times
...
Delila
2 months ago
I feel like B makes more sense. Vault server needs a solid cert.
upvoted 0 times
...
Matt
2 months ago
I think it's A. The CA Certificate is crucial for trust.
upvoted 0 times
...
Mollie
2 months ago
Really surprised this isn't more straightforward!
upvoted 0 times
...
Barney
2 months ago
Nah, I don't think self-signed is secure enough.
upvoted 0 times
...
Glenn
4 months ago
Wait, isn't it C? That sounds familiar.
upvoted 0 times
...
Tiera
4 months ago
I think B is the right choice.
upvoted 0 times
...
Laticia
4 months ago
Definitely A, you need the CA Certificate.
upvoted 0 times
...
Gearldine
4 months ago
Just to clarify, A is definitely the correct answer!
upvoted 0 times
...
Marg
5 months ago
I thought self-signed certs were enough for this kind of setup.
upvoted 0 times
...
Malcom
5 months ago
Wait, isn't it B? I thought the Vault server needed its own cert.
upvoted 0 times
...
Casie
5 months ago
Totally agree, that's the right one!
upvoted 0 times
...
Eva
5 months ago
A) the CA Certificate that signed the certificate used by the External Directory.
upvoted 0 times
...
Elvis
5 months ago
I’m leaning towards D, but I’m not confident. I remember self-signed certificates being mentioned in a different context.
upvoted 0 times
...
Francine
5 months ago
This question feels familiar; I think we had a practice question about SSL configurations. I want to say it's A or B, but I can't recall the details.
upvoted 0 times
...
Sabine
6 months ago
I'm not entirely sure, but I remember something about needing a CA signed Certificate for the Vault server. Could that be B?
upvoted 0 times
...
Essie
6 months ago
I think it might be A, since it mentions the CA Certificate that signed the external directory's certificate. That sounds relevant for SSL.
upvoted 0 times
...

Save Cancel