CyberArk Sentry - Secrets Manager Quiz - 2

If you rename an account or Safe, the Vault Conjur Synchronizer recreates these accounts and safes with their new name and deletes the old accounts or safes. What does this mean?

• Their permissions in Coniur must also be recreated to access them.

• Their permissions in Coniur remain the same.

• You can not rename an account or safe.

• The Vault-Conjur Synchronizer will recreate these accounts and safes with their exact same names.

You start up a Follower and try to connect to it with a REST call using the server certificate, but you get an SSL connection refused error. What could be the problem and how should you fix it?

• The certificate does not contain the Follower hostname as a Subject Alternative Name (SAN). Generate a new certificate for the Follower.

• One of the PostgreSQL ports (5432. 1999) is blocked by the firewall Open those ports.

• Port 443 is blocked; open that port.

• The certificate is unnecessary. Use the command option to suppress SSL certificate checking.

When working with Summon, what is the purpose of the secrets.yml file?

• It is where Summon outputs the secret value after retrieval.

• It is where you define which secrets to retrieve.

• It is where you store the Conjur URL and host API key.

• It is the log file for Summon.

You have a PowerShell script that is being used on 1000 workstations. It requires a Windows Domain credential that is currently hard coded in the script. What is the simplest solution to remove that credential from the Script?

• Modify the script to use the CLI SDK to fetch the secret at runtime using Credential Providers installed on each workstation.

• Modify the script to make a SOAP call to retrieve the secret from the Central Credential Provider.

• Modify the script to run on WebSphere using the Application Server Credential Provider to retrieve the secret.

• Use Conjur Summon to invoke the script and inject the secret at run time.

When installing the Vault Conjur Synchronizer, you see this error: Forbidden Logon Token is Empty - Cannot logon Unauthorized. What must you ensure to remediate the issue?

• This admin user must not be logged in to other sessions during the Vault Conjur Synchronizer installation process.

• You specified the correct url for Conjur and it is listed as a SAN on that url's certificate.

• You correctly URI encoded the url in the installation script.

• You ran powershell as Administrator and there is sufficient space on the server on which you are running the installation.

Which API endpoint can be used to discover secrets inside of Conjur?

• Resources

• Roles

• Policies

• WhoAmi

Which steps are required to repair the cluster when the old Leader is brought back online?

• On the new Leader, generate a Standby seed for the old Leader node and add it to the cluster member list. Rebuild the old Leader as a new Standby and then re-enroll the node to the cluster.

• Generate a Standby seed for the newly promoted Leader. Stop and remove the container on the new Leader, then rebuild it as a new Standby. Re-enroll the Standby to the cluster and re-base replication of the 3rd Standby back to the old Leader.

• Generate standby seeds for the newly-promoted Leader and the 3rd Standby Stop and remove the containers and then rebuild them as new Standbys. On both new Standbys, re-enroll the node to the cluster.

• On the new Leader, generate a Standby seed for the old Leader node and re-upload the auto-failover policy in 'replace' mode. Rebuild the old Leader as a new Standby, then re-enroll the node to the cluster.

Arrange the manual failover configuration steps in the correct sequence.

When attempting to configure a Follower, you receive the error: Which port is the problem?

• 5432

• 1999

• 443

• 1858

How many Windows and Linux servers are required for a minimal Conjur deployment that integrates with an existing CyberArk PAM Vault environment, supports high availability, and is redundant across two geographically disparate regions?

• 5 Linux servers, 2 Windows servers

• 9 Linux servers, 2 Windows servers

• 3 Linux servers, 1 Windows server

• 10 Linux servers, 2 Windows server