CyberArk SECRET-SEN Exam Questions Instant Access

Question 1

You have a request to protect all the properties around a credential object. When configuring the credential in the Vault, you specified the address, user and password for the credential.

How do you configure the Vault Conjur Synchronizer to properly sync all properties?

AModify VaultConjurSynchronizer.exe.config, uncomment SYNCALLPROPERTIES and update its value to true.

BModify SynchronizerReplication.config, uncomment SYNCALLPROPERTIES and update its value to true.

CModify Vault.ini, uncomment SYNCALLPROPERTIES and update its value to true.

DIn the Conjur UI under Cluster > Synchronizer > Config, change SYNCALLPROPERTIES and update its value to true.

Answer : A

Question 2

While installing the first CP in an environment, errors that occurred when the environment was created are displayed; however, the installation procedure continued and finished successfully.

What should you do?

AContinue configuring the application to use the CP. No further action is needed since the successful installation makes the error message benign.

BReview the lag file 'CreateEnv.loq' and investigate any error messages it contains.

CRun setup.exe again and select 'Recreate Vault Environment'. Provide the details of a user with more privileges when prompted by the installer.

DReview the PV WA lags to determine which REST API call used during the installation failed.

Answer : B

Question 3

During the configuration of Conjur, what is a possible deployment scenario?

AThe Leader and Followers are deployed outside of a Kubernetes environment; Slandbys can run inside a Kubernetes environment.

BThe Conjur Leader cluster is deployed outside of a Kubernetes environment; Followers can run inside or outside the environment.

CThe Leader cluster is deployed outside a Kubernetes environment; Followers and Standbys can run inside or outside the environment.

DThe Conjur Leader cluster and Followers are deployed inside a Kubernetes environment.

Answer : C

Question 4

An application owner reports that their application is suddenly receiving an incorrect password. CPM logs show the password was recently changed, but the value currently being retrieved by the application is a different value. The Vault Conjur Synchronizer service is running.

What is the most likely cause of this issue?

AThe Vault Conjur Synchronizer is not configured with the DR Vault IP address and there has been a failover event.

BDual Accounts are in use, but after the CPM changed the password for the Inactive account, it accidentally updated the password for the Active account instead.

CThe CPM is writing password changes to the Primary Vault while the Vault Conjur Synchronizer is configured to replicate from the DR Vault.

DThe application has been configured to retrieve the wrong password.

Answer : C

Question 5

You have a PowerShell script that is being used on 1000 workstations. It requires a Windows Domain credential that is currently hard coded in the script.

What is the simplest solution to remove that credential from the Script?

AModify the script to use the CLI SDK to fetch the secret at runtime using Credential Providers installed on each workstation.

BModify the script to make a SOAP call to retrieve the secret from the Central Credential Provider.

CModify the script to run on WebSphere using the Application Server Credential Provider to retrieve the secret.

DUse Conjur Summon to invoke the script and inject the secret at run time.

Answer : D

Question 6

If you rename an account or Safe, the Vault Conjur Synchronizer recreates these accounts and safes with their new name and deletes the old accounts or safes.

What does this mean?

ATheir permissions in Coniur must also be recreated to access them.

BTheir permissions in Coniur remain the same.

CYou can not rename an account or safe.

DThe Vault-Conjur Synchronizer will recreate these accounts and safes with their exact same names.

Answer : A

Question 7

A customer wants to ensure applications can retrieve secrets from Conjur in three different data centers if the Conjur Leader becomes unavailable. Conjur Followers are already deployed in each of these data centers.

How should you architect the solution to support this requirement?

ANo changes are required.

BDeploy a Standby in each data center that can be promoted to the role of Leader.

CExtend the auto failover cluster to include Standby in each data center and allow for automatic recovery should the Leader become unavailable.

DDeploy a CP provider on the Follower server to provide offline caching capabilities for the Follower.

Answer : B

CyberArk Sentry Secrets Manager SECRET-SEN Exam Questions