Discuss CyberArk PAM-SEN Exam Topic 5 Question 72

A customer is moving from an on-premises to a public cloud deployment.

What is the best and most cost-effective option to secure the server key?

AInstall the Vault in the cloud the same way you would in an on-premises environment. Place the server key in a password protected folder on the operating system.

BInstall the Vault in the cloud the same way you would in an on-premises environment. Purchase a Hardware Security Module to secure the server key.

CInstall the Vault using the native cloud images and secure the server key using native cloud Key Management Systems.

DInstall the Vault using the native cloud images and secure the server key with a Hardware Security Module.

Suggested Answer: C

Get Premium PAM-SEN Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

20 comments · newest first

Antonio 1 month ago

C seems like a balance of cost and security. Good choice!

Celestina 1 month ago

I feel like option A is too basic for cloud security.

Alison 2 months ago

True, but option B is expensive. Why spend more?

Nikita 2 months ago

But what about security? A Hardware Security Module is more secure.

Cyndy 2 months ago

Agreed! It's cost-effective and integrates well.

Ashton 2 months ago

I think option C is the best. Native cloud KMS is designed for this.

Owen 2 months ago

Honestly, I think A could work if you manage it right.

Ernie 2 months ago

D is overkill, just stick with C for cost-effectiveness.

Ronny 3 months ago

Surprised that people still consider A, it's not secure enough for cloud!

Milly 3 months ago

I disagree, B seems safer with a Hardware Security Module.

Renea 3 months ago

C is the way to go, native cloud KMS is super efficient!

Cyril 3 months ago

D sounds overkill for most use cases, honestly.

Zachary 3 months ago

Native cloud KMS is usually cheaper and easier to manage.

Bulah 3 months ago

Surprised that people still think A is a good option!

Margot 5 months ago

I disagree, B seems more secure with the HSM.

Fletcher 5 months ago

C is definitely the way to go for cloud environments.

Linwood 6 months ago

I’m torn between A and C. A seems too basic, but I wonder if C might be too reliant on the cloud provider's tools.

Julieta 6 months ago

I practiced a similar question where using native cloud Key Management Systems was highlighted as a best practice. I think C could be the right choice.

Carey 6 months ago

I'm not entirely sure, but I feel like using a Hardware Security Module in option B or D might be overkill for cost-effectiveness.

Jose 6 months ago

I think option C sounds familiar, especially since it mentions using native cloud images. I remember reading that cloud providers have built-in security features.

CyberArk PAM-SEN Exam - Topic 5 Question 72 Discussion