Free CyberArk Sentry Secrets Manager Exam SECRET-SEN Exam Practice Test

What does “Line of business (LOB)” represent?

• a business group requiring access to secrets from the Vault/Privilege Claud to facilitate syncing accounts to Conjur
• the services that Conjur offers and typically refers to a group of application identities in Conjur
• a business group that meets a certain set of Conjur policies for entitlements and policy management
• the services that Conjur offers and typically refers to the list of configured and enabled authenticators in Conjur

When loading policy, you receive a 422 Response from Conjur with a message. What could cause this issue?

• malformed Policy file
• incorrect Leader URL
• misconfigured Load Balancer health check
• incorrect Vault Conjur Synchronizer URL

What is a possible Conjur node role change?

• A Standby may be promoted to a Leader.
• A Follower may be promoted to a Leader.
• A Standby may be promoted to a Follower.
• A Leader may be demoted to a Standby in the event of a failover.

A customer wants to ensure applications can retrieve secrets from Conjur in three different data centers if the Conjur Leader becomes unavailable. Conjur Followers are already deployed in each of these data centers.How should you architect the solution to support this requirement?

• No changes are required.
• Deploy a Standby in each data center that can be promoted to the role of Leader.
• Extend the auto failover cluster to include Standby© in each data center and allow for automatic recovery should the Leader become unavailable.
• Deploy a CP provider on the Follower server to provide offline caching capabilities for the Follower.

How many Windows and Linux servers are required for a minimal Conjur deployment that integrates with an existing CyberArk PAM Vault environment, supports high availability, and is redundant across two geographically disparate regions?

• 5 Linux servers, 2 Windows servers
• 9 Linux servers, 2 Windows servers
• 3 Linux servers, 1 Windows server
• 10 Linux servers, 2 Windows server

Followers are replications of the Leader configured for which purpose?

• synchronous replication to ensure that there is always an up-to-date database
• asynchronous replication from the Leader which allows secret reads at scale
• asynchronous replication from the Leader with read/write operations capability
• synchronous replication to ensure high availability

An application is having authentication issues when trying to securely retrieve credential’s from the Vault using the CCP webservices RESTAPI. CyberArk Support advised that further debugging shouldbe enabled on the CCP server to output a trace file to review detailed logs to help isolate the problem.What best describes how to enable debug for CCP?

• Edit web.config. change the “AIMWebServiceTrace” value, restart Windows Web Server (IIS)
• In the PVWA, go to the Applications tab, select the Application in question, go to Options > Logging and choose Debug.
• From the command line, run appprvmgr.exe update_config logging=debug.
• Edit the basic_appprovider.conf, change the “AIMWebServiceTrace" value, and restart the provider.

An application owner reports that their application is suddenly receiving an incorrect password. CPM logs show the password was recently changed, but the value currently being retrieved by the application is a different value. The Vault Conjur Synchronizer service is running.What is the most likely cause of this issue?

• The Vault Conjur Synchronizer is not configured with the DR Vault IP address and there has been a failover event.
• Dual Accounts are in use, but after the CPM changed the password for the Inactive account, it accidentally updated the password for the Active account instead.
• The CPM is writing password changes to the Primary Vault while the Vault Conjur Synchronizer is configured to replicate from the DR Vault.
• The application has been configured to retrieve the wrong password.

When working with Credential Providers in a Privileged Cloud setting, what is a special consideration?

• If there are installation issues, troubleshooting may need to involve the Privileged Cloud support team.
• Credential Providers are not supported in a Privileged Cloud setting.
• The AWS Cloud account number must be defined in the file main appprovider.conf.. found in the AppProviderConf Safe.
• Debug logging for Credential Providers deployed in a Privileged Cloud setting can inadvertently exhaust available disk space.

When installing the Vault Conjur Synchronizer, you see this error:ForbiddenLogon Token is Empty – Cannot logon UnauthorizedWhat must you ensure to remediate the issue?

• This admin user must not be logged in to other sessions during the Vault Conjur Synchronizer installation process.
• You specified the correct url for Conjur and it is listed as a SAN on that url’s certificate.
• You correctly URI encoded the url in the installation script.
• You ran powershell as Administrator and there is sufficient space on the server on which you are running the installation.