CyberArk SECRET-SEN Exam Practice Test Instant Access

Question 1

Which statement is true for the Conjur Command Line Interface (CLI)?

AIt is supported on Windows, Red Hat Enterprise Linux, and macOS.

BIt can only be run from the Conjur Leader node.

CIt is required for working with the Conjur REST API.

DIt does not implement the Conjur REST API for managing Conjur resources.

Answer : A

Question 2

You have a request to protect all the properties around a credential object. When configuring the credential in the Vault, you specified the address, user and password for the credential.

How do you configure the Vault Conjur Synchronizer to properly sync all properties?

AModify VaultConjurSynchronizer.exe.config, uncomment SYNCALLPROPERTIES and update its value to true.

BModify SynchronizerReplication.config, uncomment SYNCALLPROPERTIES and update its value to true.

CModify Vault.ini, uncomment SYNCALLPROPERTIES and update its value to true.

DIn the Conjur UI under Cluster > Synchronizer > Config, change SYNCALLPROPERTIES and update its value to true.

Answer : A

Question 3

During the configuration of Conjur, what is a possible deployment scenario?

AThe Leader and Followers are deployed outside of a Kubernetes environment; Slandbys can run inside a Kubernetes environment.

BThe Conjur Leader cluster is deployed outside of a Kubernetes environment; Followers can run inside or outside the environment.

CThe Leader cluster is deployed outside a Kubernetes environment; Followers and Standbys can run inside or outside the environment.

DThe Conjur Leader cluster and Followers are deployed inside a Kubernetes environment.

Answer : C

Question 4

When working with Credential Providers in a Privileged Cloud setting, what is a special consideration?

AIf there are installation issues, troubleshooting may need to involve the Privileged Cloud support team.

BCredential Providers are not supported in a Privileged Cloud setting.

CThe AWS Cloud account number must be defined in the file main appprovider.conf. .<version> found in the AppProviderConf Safe.

DDebug logging for Credential Providers deployed in a Privileged Cloud setting can inadvertently exhaust available disk space.

Answer : A

Question 5

A Kubernetes application attempting to authenticate to the Follower load balancer receives this error:

ERROR: 2024/10/30 06:07:08 authenticator.go:139: CAKC029E Received invalid response to certificate signing request. Reason: status code 401

When checking the logs, you see this message:

authn-k8s/prd-cluster-01 is not enabled

How do you remediate the issue?

ACheck the info endpoint on each Follower behind the load balancer and enable the authenticator on the Follower.

BModify conjur.conf in /opt/conjur/etc/authenticators addinqthe authenticator webservice.

CA network issue is preventing the application from reaching the Follower; correct the issue and verity that it is resolved.

DEnable the authenticator in the Ul > Webservices > Authenticators > Enable and enable the appropriate authenticator webservice.

Answer : A

Question 6

When installing the Vault Conjur Synchronizer, you see this error:

Forbidden

Logon Token is Empty -- Cannot logon

Unauthorized

What must you ensure to remediate the issue?

AThis admin user must not be logged in to other sessions during the Vault Conjur Synchronizer installation process.

BYou specified the correct url for Conjur and it is listed as a SAN on that url's certificate.

CYou correctly URI encoded the url in the installation script.

DYou ran powershell as Administrator and there is sufficient space on the server on which you are running the installation.

Answer : B

Question 7

In the event of a failover of the Vault server from the primary to the DR, which configuration option ensures that a CP will continue being able to refresh its cache?

AAdd the DR Vault IP address to the ''Address'' parameter in the file main_appprovider.conf. .<version> found in the AppProviderConf safe.

BAdd the IP address of the DR vault to the ''Address'' parameter in the file Vault.ini.file on the machine on which the CP is installed.

CIn the Password Vault Web Access UI, add the IP address of the DR Vault in the Disaster Recovery section under Applications > Options.

DIn the Conjur UI, add the IP address of the DR Vault in the Disaster Recovery section under Cluster Config > Credential Provider > Options.

Answer : B

CyberArk Sentry Secrets Manager SECRET-SEN Exam Practice Test