Free Practice Questions for CyberArk SECRET-SEN Exam

Question 1

Refer to the exhibit.

How can you confirm that the Follower has a current copy of the database?

ACompare the pgcurrentxlog_locationlocation from the Leader to the Follower you need to validate against.

BCount the number of components in pgstartreplication and compare this to the total number of Followers in the deployment.

CValidate that the Follower container ID matches the node in the info endpoint on the Leader.

DRetrieve the credential from a test application on the Leader cluster; then retrieve against the Follower and compare if they are accurate.

Correct Answer: A. Compare the pgcurrentxlog_locationlocation from the Leader to the Follower you need to validate against.

Question 2

While installing the first CP in an environment, errors that occurred when the environment was created are displayed; however, the installation procedure continued and finished successfully.

What should you do?

AContinue configuring the application to use the CP. No further action is needed since the successful installation makes the error message benign.

BReview the lag file 'CreateEnv.loq' and investigate any error messages it contains.

CRun setup.exe again and select 'Recreate Vault Environment'. Provide the details of a user with more privileges when prompted by the installer.

DReview the PV WA lags to determine which REST API call used during the installation failed.

Correct Answer: B. Review the lag file 'CreateEnv.loq' and investigate any error messages it contains.

Question 3

During the configuration of Conjur, what is a possible deployment scenario?

AThe Leader and Followers are deployed outside of a Kubernetes environment; Slandbys can run inside a Kubernetes environment.

BThe Conjur Leader cluster is deployed outside of a Kubernetes environment; Followers can run inside or outside the environment.

CThe Leader cluster is deployed outside a Kubernetes environment; Followers and Standbys can run inside or outside the environment.

DThe Conjur Leader cluster and Followers are deployed inside a Kubernetes environment.

Correct Answer: C. The Leader cluster is deployed outside a Kubernetes environment; Followers and Standbys can run inside or outside the environment.

Question 4

You start up a Follower and try to connect to it with a REST call using the server certificate, but you get an SSL connection refused error.

What could be the problem and how should you fix it?

AThe certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.

BOne of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.

CPort 443 is blocked; open that port.

DThe certificate is unnecessary. Use the command option to suppress SSL certificate checking.

Correct Answer: A. The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.

Question 5

While troubleshooting an issue with accounts not syncing to Conjur, you see this in the log file:

What could be the issue?

AConnection timed out to the Vault.

BSafe permissions for the LOB user are incorrect.

CConnection timed out during loading policy through SDK.

DAt first Vault Conjur Synchronizer start up, the number of LOBs is exceeded.

Correct Answer: B. Safe permissions for the LOB user are incorrect.

Question 6

What is a possible Conjur node role change?

AA Standby may be promoted to a Leader.

BA Follower may be promoted to a Leader.

CA Standby may be promoted to a Follower.

DA Leader may be demoted to a Standby in the event of a failover.

Correct Answer: A. A Standby may be promoted to a Leader.

Question 7

A customer wants to ensure applications can retrieve secrets from Conjur in three different data centers if the Conjur Leader becomes unavailable. Conjur Followers are already deployed in each of these data centers.

How should you architect the solution to support this requirement?

ANo changes are required.

BDeploy a Standby in each data center that can be promoted to the role of Leader.

CExtend the auto failover cluster to include Standby in each data center and allow for automatic recovery should the Leader become unavailable.

DDeploy a CP provider on the Follower server to provide offline caching capabilities for the Follower.

Correct Answer: B. Deploy a Standby in each data center that can be promoted to the role of Leader.

Question 8

When an application is retrieving a credential from Conjur, the application authenticates to Follower

AFollower B receives the next request to retrieve the credential.
What happens next?

AThe Coniur Token is stateless and Follower B is able to validate the Token and satisfy the request.

BThe Coniur Token is stateful and Follower B is unable to validate the Token promptinq the application to re-authenticate.

CThe Coryur Token is stateless and Follower B redirects the request to Follower A to satisfy the request.

DThe Coniur Token is stateful and Follower B redirects the request to Follower A to satisfy the request.

Correct Answer: A, A

Question 9

You modified a Conjur host policy to change its annotations for authentication.

How should you load the policy to make those changes?

AUse the default ''append'' method (e.g. conjur policy load

).

BUse the ''replace'' method (e.g. conjur policy load -- --replace

).

CUse the ''delete'' method (e.g. conjur policy load -- --delete

).

DUse the ''update'' method (e.g. conjur policy load -- --update

).

Correct Answer: B. Use the ''replace'' method (e.g. conjur policy load -- --replace ).

Question 10

When attempting to configure a Follower, you receive the error:

Which port is the problem?

A5432

B1999

C443

D1858

Correct Answer: A. 5432