CyberArk SECRET-SEN Exam Practice Test Instant Access

Question 1

You are enabling synchronous replication on Conjur cluster.

What should you do?

AExecute this command on the Leader:
docker exec <container-name> sh --c''
evoke replication sync that
*

BExecute this command on each Standby:
docker exec <container-name> sh --c''
evoke replication sync that
*

CIn Conjur web UI, click the Tools icon in the top right corner of the main window.
Choose Conjur Cluster and click ''Enable synchronous replication'' in the entry for Leader.

DIn Conjur web UI, click the Tools icon in the top right corner of the main window.
Choose Conjur Cluster and click ''Enable synchronous replication'' in the entry for Standbys.

Answer : B

Question 2

What is a possible Conjur node role change?

AA Standby may be promoted to a Leader.

BA Follower may be promoted to a Leader.

CA Standby may be promoted to a Follower.

DA Leader may be demoted to a Standby in the event of a failover.

Answer : A

Question 3

You are setting up the Secrets Provider for Kubernetes to support rotation with Push-to-File mode.

Which deployment option should be used?

AInit container

BApplication container

CSidecar

DService Broker

Answer : C

Question 4

In a 3-node auto-failover cluster, the Leader has been brought down for patching that lasts longer than the configured TTL. A Standby has been promoted.

Which steps are required to repair the cluster when the old Leader is brought back online?

AOn the new Leader, generate a Standby seed for the old Leader node and add it to the cluster member list.
Rebuild the old Leader as a new Standby and then re-enroll the node to the cluster.

BGenerate a Standby seed for the newly promoted Leader.
Stop and remove the container on the new Leader, then rebuild it as a new Standby.
Re-enroll the Standby to the cluster and re-base replication of the 3rd Standby back to the old Leader.

CGenerate standby seeds for the newly-promoted Leader and the 3rd Standby
Stop and remove the containers and then rebuild them as new Standbys.
On both new Standbys, re-enroll the node to the cluster.

DOn the new Leader, generate a Standby seed for the old Leader node and re-upload the auto-failover policy in ''replace'' mode.
Rebuild the old Leader as a new Standby, then re-enroll the node to the cluster.

Answer : A

Question 5

What is the correct process to upgrade the CCP Web Service?

ARun ''sudo yum update aimprv'' from the CLI.

BDouble-click the Credential Provider installer executable and select upgrade.

CDouble-click the AimWebService.msi and select upgrade.

DUninstall and reinstall the CCP Web Service.

Answer : D

Question 6

When working with Credential Providers in a Privileged Cloud setting, what is a special consideration?

AIf there are installation issues, troubleshooting may need to involve the Privileged Cloud support team.

BCredential Providers are not supported in a Privileged Cloud setting.

CThe AWS Cloud account number must be defined in the file main appprovider.conf. .<version> found in the AppProviderConf Safe.

DDebug logging for Credential Providers deployed in a Privileged Cloud setting can inadvertently exhaust available disk space.

Answer : A

Question 7

An application is having authentication issues when trying to securely retrieve credential's from the Vault using the CCP webservices RESTAPI. CyberArk Support advised that further debugging should be enabled on the CCP server to output a trace file to review detailed logs to help isolate the problem.

What best describes how to enable debug for CCP?

AEdit web.config. change the ''AIMWebServiceTrace'' value, restart Windows Web Server (IIS)

BIn the PVWA, go to the Applications tab, select the Application in question, go to Options > Logging and choose Debug.

CFrom the command line, run appprvmgr.exe update_config logging=debug.

DEdit the basic_appprovider.conf, change the ''AIMWebServiceTrace' value, and restart the provider.

Answer : A

CyberArk Sentry Secrets Manager Exam Practice Test