最新のSecret-Sen問題集で試験を準備する

CyberArk Secret-Sen 試験概要:

CyberArk Secret-Sen 試験シラバストピック:

CyberArk Sentry - Secrets Manager 認定 Secret-Sen 試験問題：

1. When using the Seed Fetcher to deploy Kubernetes Followers, an error occurs in the Seed Fetcher container.
You check the logs and discover that although the Seed Fetcher was able to authenticate, it shows a 500 error in the log and does not successfully retrieve a seed file. What is the cause?

A) The synchronizer service crashed and needs to be restarted.
B) The Leader does not have the authenticator webservice enabled.
C) The certificate based on the Follower DNS name is not present on the Leader.
D) The host you configured does not have access to see the certificates.

2. You modified a Conjur host policy to change its annotations for authentication.
How should you load the policy to make those changes?

A) Use the "delete" method (e.g. conjur policy load - -delete <branch> <policy-file>).
B) Use the "update" method (e.g. conjur policy load - -update <branch> <policy-file>).
C) Use the default "append" method (e.g. conjur policy load <branch> <policy-file>).
D) Use the "replace" method (e.g. conjur policy load - -replace <branch> <policy-file>).

3. A customer has 100 .NET applications and wants to use Summon to invoke the application and inject secrets at run time.
Which change to the NET application code might be necessary to enable this?

A) It must be changed to include the REST API calls necessary to retrieve the needed secrets from the CCP.
B) It must be changed to include the host API key necessary for Summon to retrieve the needed secrets from a Follower
C) No changes are needed as Summon brokers the connection between the application and the backend data source through impersonation.
D) It must be changed to access secrets from a configuration file or environment variable.

4. When installing the Vault Conjur Synchronizer, you see this error:
Forbidden
Logon Token is Empty - Cannot logon
Unauthorized
What must you ensure to remediate the issue?

A) You correctly URI encoded the url in the installation script.
B) This admin user must not be logged in to other sessions during the Vault Conjur Synchronizer installation process.
C) You ran powershell as Administrator and there is sufficient space on the server on which you are running the installation.
D) You specified the correct url for Conjur and it is listed as a SAN on that url's certificate.

5. You are setting up the Secrets Provider for Kubernetes to support rotation with Push-to-File mode.
Which deployment option should be used?

A) Sidecar
B) Init container
C) Service Broker
D) Application container

質問と回答：