DELINEA-SS Practice Test

DELINEA-SS practice test: what's covered

• Secret Server
• Secrets
• RBAC
• RPC/Heartbeat
• Session Recording

Free DELINEA-SS sample questions

1. Delinea Secret Server (on-prem) is built on which technology stack?

   • A. A Linux/PHP app with MySQL
   • B. A .NET / IIS web application backed by a Microsoft SQL Server database
   • C. A Java app on Oracle
   • D. A BGP daemon
   Show answer

   Correct: B. Secret Server on-prem is a .NET web app hosted on IIS with a SQL Server backend. (Delinea also offers Secret Server Cloud as SaaS.) Knowing the stack matters for installation, sizing, and DR planning.

2. Secret data in Secret Server is protected by:

   • A. Plaintext in the database
   • B. Encryption — secrets are encrypted (AES-256) and the encryption key is itself protected (e.g., master encryption key / DPAPI / HSM), so DB access alone does not reveal secrets
   • C. BGP
   • D. A simple hash
   Show answer

   Correct: B. Secrets are AES-256 encrypted; the keys are protected (master key, DPAPI, optionally HSM). A DBA with raw DB access still can't read secrets without the encryption keys — defense in depth for the vault.

3. Which TWO deployment models does Secret Server offer? (Choose 2)

   • A. On-prem (self-hosted .NET/IIS + SQL Server)
   • B. Secret Server Cloud (SaaS, Delinea-hosted)
   • C. BGP-hosted
   • D. Fax-based
   Show answer

   Correct: A and B. On-prem (you run IIS+SQL) and Secret Server Cloud (SaaS). Choose by data-residency, ops capacity, and compliance. BGP/fax are not deployment models.

4. A "Distributed Engine" in Secret Server is used to:

   • A. Replace the web server
   • B. Perform operations (heartbeat, password changes, discovery) in remote network segments / sites on behalf of Secret Server — reaching targets the central server cannot directly, via outbound connection
   • C. Route BGP
   • D. Store backups
   Show answer

   Correct: B. Distributed Engines extend reach into segmented networks/DMZ/remote sites. They run RPC, heartbeat, and discovery locally and report back — so the central server doesn't need direct line-of-sight to every target. Outbound-connecting.

5. For high availability of Secret Server (on-prem), you would typically:

   • A. Run a single server with no redundancy
   • B. Use multiple web/front-end nodes behind a load balancer and a clustered/HA SQL Server backend — plus Distributed Engine redundancy for site operations
   • C. Rely on BGP
   • D. Use one laptop
   Show answer

   Correct: B. HA = multiple front-ends (load-balanced) + HA SQL (Always On / clustering) + redundant Distributed Engines. The vault is critical infrastructure — a single point of failure locking everyone out of privileged access is unacceptable.

Last updated: 2026-10-19

DELINEA-SS practice test FAQ