Exam PAM-SEN topic 1 question 54 discussion

Actual exam question from CyberArk's PAM-SEN

Question #: 54
Topic #: 1

As a member of a PAM Level-2 support team, you are troubleshooting an issue related to load balancing four PVWA servers at two data centers. You received a note from your Level-1 support team stating “When testing PVWA website from a workstation, we noticed that the “Source IP of last sign-in” was shown as the VIP (Virtual IP address) assigned to the four PVWA servers instead of the workstation IP where the PVWA site was launched from.”
Which step should you take?

A. Verify the “LoadBalancerClientAddressHeader” parameter setting in PVWA configuration file Web.config is set to “X-Forwarded-For”.
B. Add the VIP (Virtual IP address) assigned to the four PVWA servers to the certificates issued for all four PVWA servers, if missing.
C. Add a firewall rule to allow the testing workstation to connect to the VIP (Virtual IP address) assigned to the four PVWA servers on Port TCP 443.
D. Edit the dbparm.ini file on the Vault server and add the IP or subnet of the workstation to the whitelist.

Show Suggested Answer

Suggested Answer: A 🗳️

by penuelaandy at March 30, 2023, 10:22 p.m.

Comments

Submit Cancel

Cavdog

8 months, 2 weeks ago

Selected Answer: A

This issue will occur when PVWA's have been load balanced and the vault receives the VIP as the source IP, in order to remedy this the LoadBalancerClientAddressHeader should be set to X-Forwardedd-For in the web.config file on all PVWAs as per A. The other answers won't do anything to resolve the issue. https://docs.cyberark.com/PAS/Latest/en/Content/PASREF/Password%20Vault%20Web%20Access%20Parameter%20File.htm#LoadBalancerClientAddressHeader:~:text=LoadBalancerClientAddressHeader

upvoted 3 times

...

Fabri59

11 months, 3 weeks ago

Selected Answer: A

The answer is A. https://cyberark-customers.force.com/s/article/Load-Balancer-Implementation-with-PVWA-General-Guidelines

upvoted 1 times

...

penuelaandy

1 year, 1 month ago

Selected Answer: A

https://docs.cyberark.com/Product-Doc/OnlineHelp/PAS/13.0/en/Content/PAS%20INST/PVWA-install-multiple-PVWA-env.htm#:~:text=In%20the%20web.config%20file%2C%20for%20the%20LoadBalancerClientAddressHeader%20parameter%2C%20enter%20the%20HTTP%20Header%20field%20name%20from%20which%20the%20PVWA%20reads%20the%20client%20IP.

upvoted 2 times

...