Due to network activity, ACME Corp’s PrivateArk Server became active on the OR Vault while...

 To restore DR replication to normal after network activity caused the PrivateArk Server on the DR Vault to become active while the Primary Vault was also running, you should first shut down the PrivateArk Server on the DR Vault. This ensures that the DR Vault is no longer active and can be prepared for replication. After shutting down the server, you should then start the replication process on the DR Vault to synchronize the data from the Primary Vault1.

References:

CyberArk’s official documentation on initiating a DR failback to the Production Vault provides a detailed procedure for restoring DR replication to normal1.

Additional information on monitoring backup and DR replications can be found in CyberArk’s documentation2.

For further study and understanding of the CyberArk Defender PAM course objectives and documents, the official CyberArk training resources and study guides are recommended3.