Free CyberArk Sentry Secrets Manager Exam SECRET-SEN Exam Practice Test

You are enabling synchronous replication on Conjur cluster. What should you do?

• Execute this command on the Leader: docker exec sh –c”evoke replication sync that*
• Execute this command on each Standby: docker exec sh –c”evoke replication sync that*
• In Conjur web UI, click the Tools icon in the top right corner of the main window. Choose Conjur Cluster and click “Enable synchronous replication” in the entry for Leader.
• In Conjur web UI, click the Tools icon in the top right corner of the main window.
• Choose Conjur Cluster and click “Enable synchronous replication” in the entry for Standbys.

In a 3-node auto-failover cluster, the Leader has been brought down for patching that lasts longer than the configured TTL. A Standby has been promoted.Which steps are required to repair the cluster when the old Leader is brought back online?

• On the new Leader, generate a Standby seed for the old Leader node and add it to the cluster member list.Rebuild the old Leader as a new Standby and then re-enroll the node to the cluster.
• Generate a Standby seed for the newly promoted Leader.Stop and remove the container on the new Leader, then rebuild it as a new Standby.Re-enroll the Standby to the cluster and re-base replication of the 3rd Standby back to the old Leader.
• Generate standby seeds for the newly-promoted Leader and the 3rd Standby Stop and remove the containers and then rebuild them as new Standbys.On both new Standbys, re-enroll the node to the cluster.
• On the new Leader, generate a Standby seed for the old Leader node and re-upload the auto- failover policy in “replace” mode.
• Rebuild the old Leader as a new Standby, then re-enroll the node to the cluster.

How many Windows and Linux servers are required for a minimal Conjur deployment that integrates with an existing CyberArk PAM Vault environment, supports high availability, and is redundant across two geographically disparate regions?

• 5 Linux servers, 2 Windows servers
• 9 Linux servers, 2 Windows servers
• 3 Linux servers, 1 Windows server
• 10 Linux servers, 2 Windows server

What is the correct command to import the root CA certificate into Conjur?docker exec <ContainerName> evoke ca import – –no-restart – –root <rootC

• cer>
• docker exec evoke import – –no-restart – –root
• docker exec evoke ca import – –no-restart
• docker exec ca import

An application is having authentication issues when trying to securely retrieve credential’s from the Vault using the CCP webservices RESTAPI. CyberArk Support advised that further debugging shouldbe enabled on the CCP server to output a trace file to review detailed logs to help isolate the problem.What best describes how to enable debug for CCP?

• Edit web.config. change the “AIMWebServiceTrace” value, restart Windows Web Server (IIS)
• In the PVWA, go to the Applications tab, select the Application in question, go to Options > Logging and choose Debug.
• From the command line, run appprvmgr.exe update_config logging=debug.
• Edit the basic_appprovider.conf, change the “AIMWebServiceTrace" value, and restart the provider.

During the configuration of Conjur, what is a possible deployment scenario?

• The Leader and Followers are deployed outside of a Kubernetes environment; Slandbys can run inside a Kubernetes environment.
• The Conjur Leader cluster is deployed outside of a Kubernetes environment; Followers can run inside or outside the environment.
• The Leader cluster is deployed outside a Kubernetes environment; Followers and Standbys can run inside or outside the environment.
• The Conjur Leader cluster and Followers are deployed inside a Kubernetes environment.

If you rename an account or Safe, the Vault Conjur Synchronizer recreates these accounts and safes with their new name and deletes the old accounts or safes.What does this mean?

• Their permissions in Coniur must also be recreated to access them.
• Their permissions in Coniur remain the same.
• You can not rename an account or safe.
• The Vault-Conjur Synchronizer will recreate these accounts and safes with their exact same names.

When attempting to retrieve a credential, you receive an error 401 – Malformed Authorization Token.What is the cause of the issue?

• The token is not correctly encoded.
• The token you are trying to retrieve does not exist.
• The host does not have access to the credential with the current token.
• The credential has not been initialized.

When installing the Vault Conjur Synchronizer, you see this error:ForbiddenLogon Token is Empty – Cannot logon UnauthorizedWhat must you ensure to remediate the issue?

• This admin user must not be logged in to other sessions during the Vault Conjur Synchronizer installation process.
• You specified the correct url for Conjur and it is listed as a SAN on that url’s certificate.
• You correctly URI encoded the url in the installation script.
• You ran powershell as Administrator and there is sufficient space on the server on which you are running the installation.

A customer wants to ensure applications can retrieve secrets from Conjur in three different data centers if the Conjur Leader becomes unavailable. Conjur Followers are already deployed in each of these data centers.How should you architect the solution to support this requirement?

• No changes are required.
• Deploy a Standby in each data center that can be promoted to the role of Leader.
• Extend the auto failover cluster to include Standby© in each data center and allow for automatic recovery should the Leader become unavailable.
• Deploy a CP provider on the Follower server to provide offline caching capabilities for the Follower.