CyberArk Sentry - Secrets Manager - Secret-Sen Exam Practice Test

Question 1

Which statement is true for the Conjur Command Line Interface (CLI)?

A. It does not implement the Conjur REST API for managing Conjur resources.

B. It is required for working with the Conjur REST API.

C. It can only be run from the Conjur Leader node.

D. It is supported on Windows, Red Hat Enterprise Linux, and macOS.

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

When loading policy, you receive a 422 Response from Conjur with a message.
What could cause this issue?

A. incorrect Vault Conjur Synchronizer URL

B. misconfigured Load Balancer health check

C. incorrect Leader URL

D. malformed Policy file

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

When attempting to retrieve a credential managed by the Synchronizer, you receive this error:

What is the cause of the issue?

A. The path to the credential was not properly encoded.

B. The Vault Conjur Synchronizer has crashed and needs to be restarted.

C. The host does not have access to the credential.

D. The Conjur Leader has lost upstream connectivity to the Vault Conjur Synchronizer.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

A customer requires high availability in its AWS cloud infrastructure.
What is the minimally viable Conjur deployment architecture to achieve this?

A. one Follower in each AZ. load balancer for the region

B. two Followers in each region, load balanced for the region

C. two Followers in each region, load balanced across all regions

D. two Followers in each AZ. load balanced for the region

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

You start up a Follower and try to connect to it with a REST call using the server certificate, but you get an SSL connection refused error.
What could be the problem and how should you fix it?

A. One of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.

B. The certificate is unnecessary. Use the command option to suppress SSL certificate checking.

C. The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.

D. Port 443 is blocked; open that port.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

An application owner reports that their application is suddenly receiving an incorrect password. CPM logs show the password was recently changed, but the value currently being retrieved by the application is a different value. The Vault Conjur Synchronizer service is running.
What is the most likely cause of this issue?

A. The application has been configured to retrieve the wrong password.

B. The Vault Conjur Synchronizer is not configured with the DR Vault IP address and there has been a failover event.

C. The CPM is writing password changes to the Primary Vault while the Vault Conjur Synchronizer is configured to replicate from the DR Vault.

D. Dual Accounts are in use, but after the CPM changed the password for the Inactive account, it accidentally updated the password for the Active account instead.

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

You are setting up a Kubernetes integration with Conjur. With performance as the key deciding factor, namespace and service account will be used as identity characteristics.
Which authentication method should you choose?

A. JWT-based authentication

B. Certificate-based authentication

C. API key authentication

D. Connect (OIDC) authentication

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

CyberArk Sentry - Secrets Manager - Secret-Sen Exam Practice Test

Latest Update

Useful Links

Contact Us