CyberArk SECRET-SEN Exam Questions Instant Access

Question 1

Which statement is correct about this message?

Message: ''[number-of-deleted-rows] rows has successfully deleted ''CEADBR009D Finished vacuum''?

AIt notes the number of records deleted from the database and does not require any action.

BThe user specified for Conjur does not have the appropriate permissions to retrieve the audit database (audit .db).

CWhen audit retention was performed, the query on the Ul audit database (audit.db) generated an error.

DThe Vault Conjur Synchronizer successfully deleted the password objects that were marked for deletion in the PVWA.

Answer : A

Question 2

How many Windows and Linux servers are required for a minimal Conjur deployment that integrates with an existing CyberArk PAM Vault environment, supports high availability, and is redundant across two geographically disparate regions?

A5 Linux servers, 2 Windows servers

B9 Linux servers, 2 Windows servers

C3 Linux servers, 1 Windows server

D10 Linux servers, 2 Windows server

Answer : B

Question 3

When installing the Vault Conjur Synchronizer, you see this error:

Forbidden

Logon Token is Empty -- Cannot logon

Unauthorized

What must you ensure to remediate the issue?

AThis admin user must not be logged in to other sessions during the Vault Conjur Synchronizer installation process.

BYou specified the correct url for Conjur and it is listed as a SAN on that url's certificate.

CYou correctly URI encoded the url in the installation script.

DYou ran powershell as Administrator and there is sufficient space on the server on which you are running the installation.

Answer : B

Question 4

After manually failing over to your disaster recovery site (Site B) for testing purposes, you need to failback to your primary site (Site A).

Which step is required?

AContact CyberArk for a new license file.

BReconfigure the Vault Conjur Synchronizer to point to the new Conjur Leader.

CGenerate a seed for the new Leader to be deployed in Site A.

DTrigger autofailover to promote the Standby in Site A to Leader.

Answer : C

Question 5

An application owner reports that their application is suddenly receiving an incorrect password. CPM logs show the password was recently changed, but the value currently being retrieved by the application is a different value. The Vault Conjur Synchronizer service is running.

What is the most likely cause of this issue?

AThe Vault Conjur Synchronizer is not configured with the DR Vault IP address and there has been a failover event.

BDual Accounts are in use, but after the CPM changed the password for the Inactive account, it accidentally updated the password for the Active account instead.

CThe CPM is writing password changes to the Primary Vault while the Vault Conjur Synchronizer is configured to replicate from the DR Vault.

DThe application has been configured to retrieve the wrong password.

Answer : C

Question 6

A customer requires high availability in its AWS cloud infrastructure.

What is the minimally viable Conjur deployment architecture to achieve this?

Aone Follower in each AZ. load balancer for the region

Btwo Followers in each region, load balanced for the region

Ctwo Followers in each AZ. load balanced for the region

Dtwo Followers in each region, load balanced across all regions

Answer : A

Question 7

When an application is retrieving a credential from Conjur, the application authenticates to Follower

AFollower B receives the next request to retrieve the credential.
What happens next?

AThe Coniur Token is stateless and Follower B is able to validate the Token and satisfy the request.

BThe Coniur Token is stateful and Follower B is unable to validate the Token promptinq the application to re-authenticate.

CThe Coryur Token is stateless and Follower B redirects the request to Follower A to satisfy the request.

DThe Coniur Token is stateful and Follower B redirects the request to Follower A to satisfy the request.

Answer : A, A

CyberArk Sentry Secrets Manager SECRET-SEN Exam Questions