CyberArk SECRET-SEN Exam Practice Test Instant Access

Question 1

You have a request to protect all the properties around a credential object. When configuring the credential in the Vault, you specified the address, user and password for the credential.

How do you configure the Vault Conjur Synchronizer to properly sync all properties?

AModify VaultConjurSynchronizer.exe.config, uncomment SYNCALLPROPERTIES and update its value to true.

BModify SynchronizerReplication.config, uncomment SYNCALLPROPERTIES and update its value to true.

CModify Vault.ini, uncomment SYNCALLPROPERTIES and update its value to true.

DIn the Conjur UI under Cluster > Synchronizer > Config, change SYNCALLPROPERTIES and update its value to true.

Answer : A

Question 2

Which statement is correct about this message?

Message: ''[number-of-deleted-rows] rows has successfully deleted ''CEADBR009D Finished vacuum''?

AIt notes the number of records deleted from the database and does not require any action.

BThe user specified for Conjur does not have the appropriate permissions to retrieve the audit database (audit .db).

CWhen audit retention was performed, the query on the Ul audit database (audit.db) generated an error.

DThe Vault Conjur Synchronizer successfully deleted the password objects that were marked for deletion in the PVWA.

Answer : A

Question 3

You are setting up the Secrets Provider for Kubernetes to support rotation with Push-to-File mode.

Which deployment option should be used?

AInit container

BApplication container

CSidecar

DService Broker

Answer : C

Question 4

While installing the first CP in an environment, errors that occurred when the environment was created are displayed; however, the installation procedure continued and finished successfully.

What should you do?

AContinue configuring the application to use the CP. No further action is needed since the successful installation makes the error message benign.

BReview the lag file 'CreateEnv.loq' and investigate any error messages it contains.

CRun setup.exe again and select 'Recreate Vault Environment'. Provide the details of a user with more privileges when prompted by the installer.

DReview the PV WA lags to determine which REST API call used during the installation failed.

Answer : B

Question 5

What is the correct process to upgrade the CCP Web Service?

ARun ''sudo yum update aimprv'' from the CLI.

BDouble-click the Credential Provider installer executable and select upgrade.

CDouble-click the AimWebService.msi and select upgrade.

DUninstall and reinstall the CCP Web Service.

Answer : D

Question 6

A customer requires high availability in its AWS cloud infrastructure.

What is the minimally viable Conjur deployment architecture to achieve this?

Aone Follower in each AZ. load balancer for the region

Btwo Followers in each region, load balanced for the region

Ctwo Followers in each AZ. load balanced for the region

Dtwo Followers in each region, load balanced across all regions

Answer : A

Question 7

In a 3-node auto-failover cluster, the Leader has been brought down for patching that lasts longer than the configured TTL. A Standby has been promoted.

Which steps are required to repair the cluster when the old Leader is brought back online?

AOn the new Leader, generate a Standby seed for the old Leader node and add it to the cluster member list.
Rebuild the old Leader as a new Standby and then re-enroll the node to the cluster.

BGenerate a Standby seed for the newly promoted Leader.
Stop and remove the container on the new Leader, then rebuild it as a new Standby.
Re-enroll the Standby to the cluster and re-base replication of the 3rd Standby back to the old Leader.

CGenerate standby seeds for the newly-promoted Leader and the 3rd Standby
Stop and remove the containers and then rebuild them as new Standbys.
On both new Standbys, re-enroll the node to the cluster.

DOn the new Leader, generate a Standby seed for the old Leader node and re-upload the auto-failover policy in ''replace'' mode.
Rebuild the old Leader as a new Standby, then re-enroll the node to the cluster.

Answer : A

CyberArk SECRET-SEN CyberArk Sentry Secrets Manager Exam Practice Test