If a customer has one data center and requires fault tolerance, how many PVWAs should be deployed?

To achieve fault tolerance and high availability for the Password Vault Web Access (PVWA) within a single data center, CyberArk recommends deploying two or more PVWA servers configured behind a load balancer. This active-active architecture ensures that if one PVWA server fails or requires maintenance, the load balancer will seamlessly redirect user traffic to the remaining available PVWA servers, effectively eliminating a single point of failure for web access.

B. PVWAs are deployed as independent, active-active web nodes behind a load balancer, not as a traditional cluster.

C. Deploying only one PVWA creates a single point of failure, which violates the requirement for fault tolerance.

D. PVWAs do not use clustering technology; they rely on load balancing across multiple independent servers.

1. CyberArk Privileged Access Manager Documentation, "High Availability and Load Balancing" -> "PVWA Load Balancing" section.