CyberArk SECRET-SEN CyberArk Sentry Secrets Manager Exam Exam Practice Test Questions

• Question 1

  What is a main advantage of using dual accounts in password management?

  • Since passwords are cached for both rotation accounts, it ensures the password for an application will not be changed, reducing the amount of blackout dates when a password expires.
  • It ensures passwords are rotated every 90 days, which respects the expected downtime for a system, database, or application
  • It ensures no delays are incurred when the application needs credentials because a password that is currently used by an application will never be changed
  • Since there are two active accounts, it doubles the probability that a system, database, or application will successfully authenticate.

  Show Answer Answer: C Next

• Question 2

  An application is having authentication issues when trying to securely retrieve credential’s from the Vault using the CCP webservices RESTAPI. CyberArk Support advised that further debugging shouldbe enabled on the CCP server to output a trace file to review detailed logs to help isolate the problem.What best describes how to enable debug for CCP?

  • Edit web.config. change the “AIMWebServiceTrace” value, restart Windows Web Server (IIS)
  • In the PVWA, go to the Applications tab, select the Application in question, go to Options > Logging and choose Debug.
  • From the command line, run appprvmgr.exe update_config logging=debug.
  • Edit the basic_appprovider.conf, change the “AIMWebServiceTrace" value, and restart the provider.

  Show Answer Answer: A Next

• Question 3

  When working with Summon, what is the purpose of the secrets.yml file?

  • It is where Summon outputs the secret value after retrieval.
  • It is where you define which secrets to retrieve.
  • It is where you store the Conjur URL and host API key.
  • It is the log file for Summon.

  Show Answer Answer: B Next

• Question 4

  A customer wants to minimize the Kubernetes application code developers must change to adopt Conjur for secrets access.Which solutions can meet this requirement? (Choose two.)

  • CPM Push-to-File
  • Secrets Provider
  • Authn-Azure
  • Secretless
  • Application Server Credential Provider

  Show Answer Answer: B, ,D Next

• Question 5

  How many Windows and Linux servers are required for a minimal Conjur deployment that integrates with an existing CyberArk PAM Vault environment, supports high availability, and is redundant across two geographically disparate regions?

  • 5 Linux servers, 2 Windows servers
  • 9 Linux servers, 2 Windows servers
  • 3 Linux servers, 1 Windows server
  • 10 Linux servers, 2 Windows server

  Show Answer Answer: B Next