CyberArk SECRET-SEN Exam Practice Test Instant Access

Question 1

You are enabling synchronous replication on Conjur cluster.

What should you do?

AExecute this command on the Leader:
docker exec <container-name> sh --c''
evoke replication sync that
*

BExecute this command on each Standby:
docker exec <container-name> sh --c''
evoke replication sync that
*

CIn Conjur web UI, click the Tools icon in the top right corner of the main window.
Choose Conjur Cluster and click ''Enable synchronous replication'' in the entry for Leader.

DIn Conjur web UI, click the Tools icon in the top right corner of the main window.
Choose Conjur Cluster and click ''Enable synchronous replication'' in the entry for Standbys.

Answer : B

Question 2

A customer wants to minimize the Kubernetes application code developers must change to adopt Conjur for secrets access.

Which solutions can meet this requirement? (Choose two.)

ACPM Push-to-File

BSecrets Provider

Cauthn-Azure

DSecretless

EApplication Server Credential Provider

Answer : B, D

Question 3

While troubleshooting an issue with accounts not syncing to Conjur, you see this in the log file:

What could be the issue?

AConnection timed out to the Vault.

BSafe permissions for the LOB user are incorrect.

CConnection timed out during loading policy through SDK.

DAt first Vault Conjur Synchronizer start up, the number of LOBs is exceeded.

Answer : B

Question 4

What is a main advantage of using dual accounts in password management?

ASince passwords are cached for both rotation accounts, it ensures the password for an application will not be changed, reducing the amount of blackout dates when a password expires.

BIt ensures passwords are rotated every 90 days, which respects the expected downtime for a system, database, or application

CIt ensures no delays are incurred when the application needs credentials because a password that is currently used by an application will never be changed

DSince there are two active accounts, it doubles the probability that a system, database, or application will successfully authenticate.

Answer : C

Question 5

An application owner reports that their application is suddenly receiving an incorrect password. CPM logs show the password was recently changed, but the value currently being retrieved by the application is a different value. The Vault Conjur Synchronizer service is running.

What is the most likely cause of this issue?

AThe Vault Conjur Synchronizer is not configured with the DR Vault IP address and there has been a failover event.

BDual Accounts are in use, but after the CPM changed the password for the Inactive account, it accidentally updated the password for the Active account instead.

CThe CPM is writing password changes to the Primary Vault while the Vault Conjur Synchronizer is configured to replicate from the DR Vault.

DThe application has been configured to retrieve the wrong password.

Answer : C

Question 6

What does ''Line of business (LOB)'' represent?

Aa business group requiring access to secrets from the Vault/Privilege Claud to facilitate syncing accounts to Conjur

Bthe services that Conjur offers and typically refers to a group of application identities in Conjur

Ca business group that meets a certain set of Conjur policies for entitlements and policy management

Dthe services that Conjur offers and typically refers to the list of configured and enabled authenticators in Conjur

Answer : A

Question 7

Which statement is correct about this message?

Message: ''[number-of-deleted-rows] rows has successfully deleted ''CEADBR009D Finished vacuum''?

AIt notes the number of records deleted from the database and does not require any action.

BThe user specified for Conjur does not have the appropriate permissions to retrieve the audit database (audit .db).

CWhen audit retention was performed, the query on the Ul audit database (audit.db) generated an error.

DThe Vault Conjur Synchronizer successfully deleted the password objects that were marked for deletion in the PVWA.

Answer : A

CyberArk SECRET-SEN CyberArk Sentry Secrets Manager Exam Practice Test