CyberArk SECRET-SEN Exam Questions Instant Access

Question 1

When installing the Vault Conjur Synchronizer, you see this error:

Forbidden

Logon Token is Empty -- Cannot logon

Unauthorized

What must you ensure to remediate the issue?

AThis admin user must not be logged in to other sessions during the Vault Conjur Synchronizer installation process.

BYou specified the correct url for Conjur and it is listed as a SAN on that url's certificate.

CYou correctly URI encoded the url in the installation script.

DYou ran powershell as Administrator and there is sufficient space on the server on which you are running the installation.

Answer : B

Question 2

When working with Summon, what is the purpose of the secrets.yml file?

AIt is where Summon outputs the secret value after retrieval.

BIt is where you define which secrets to retrieve.

CIt is where you store the Conjur URL and host API key.

DIt is the log file for Summon.

Answer : B

Question 3

Which statement is true for the Conjur Command Line Interface (CLI)?

AIt is supported on Windows, Red Hat Enterprise Linux, and macOS.

BIt can only be run from the Conjur Leader node.

CIt is required for working with the Conjur REST API.

DIt does not implement the Conjur REST API for managing Conjur resources.

Answer : A

Question 4

What is the correct process to upgrade the CCP Web Service?

ARun ''sudo yum update aimprv'' from the CLI.

BDouble-click the Credential Provider installer executable and select upgrade.

CDouble-click the AimWebService.msi and select upgrade.

DUninstall and reinstall the CCP Web Service.

Answer : D

Question 5

You are setting up a Kubernetes integration with Conjur. With performance as the key deciding factor, namespace and service account will be used as identity characteristics.

Which authentication method should you choose?

AJWT-based authentication

BCertificate-based authentication

CAPI key authentication

DConnect (OIDC) authentication

Answer : A

Question 6

If you rename an account or Safe, the Vault Conjur Synchronizer recreates these accounts and safes with their new name and deletes the old accounts or safes.

What does this mean?

ATheir permissions in Coniur must also be recreated to access them.

BTheir permissions in Coniur remain the same.

CYou can not rename an account or safe.

DThe Vault-Conjur Synchronizer will recreate these accounts and safes with their exact same names.

Answer : A

Question 7

When an application is retrieving a credential from Conjur, the application authenticates to Follower

AFollower B receives the next request to retrieve the credential.
What happens next?

AThe Coniur Token is stateless and Follower B is able to validate the Token and satisfy the request.

BThe Coniur Token is stateful and Follower B is unable to validate the Token promptinq the application to re-authenticate.

CThe Coryur Token is stateless and Follower B redirects the request to Follower A to satisfy the request.

DThe Coniur Token is stateful and Follower B redirects the request to Follower A to satisfy the request.

Answer : A, A

CyberArk Sentry Secrets Manager SECRET-SEN Exam Questions