CyberArk Secret-Sen 問題集

質問 1：
What is a main advantage of using dual accounts in password management?
A. Since there are two active accounts, it doubles the probability that a system, database, or application will successfully authenticate.
B. It ensures passwords are rotated every 90 days, which respects the expected downtime for a system, database, or application
C. Since passwords are cached for both rotation accounts, it ensures the password for an application will not be changed, reducing the amount of blackout dates when a password expires.
D. It ensures no delays are incurred when the application needs credentials because a password that is currently used by an application will never be changed
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
When an application is retrieving a credential from Conjur, the application authenticates to Follower A.
Follower B receives the next request to retrieve the credential.
What happens next?
A. The Coniur Token is stateful and Follower B redirects the request to Follower A to satisfy the request.
B. The Coniur Token is stateless and Follower B is able to validate the Token and satisfy the request.
C. The Coniur Token is stateful and Follower B is unable to validate the Token promptinq the application to re-authenticate.
D. The Coryur Token is stateless and Follower B redirects the request to Follower A to satisfy the request.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 3：
When installing the Vault Conjur Synchronizer, you see this error:
Forbidden
Logon Token is Empty - Cannot logon
Unauthorized
What must you ensure to remediate the issue?
A. You specified the correct url for Conjur and it is listed as a SAN on that url's certificate.
B. You correctly URI encoded the url in the installation script.
C. This admin user must not be logged in to other sessions during the Vault Conjur Synchronizer installation process.
D. You ran powershell as Administrator and there is sufficient space on the server on which you are running the installation.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
You are setting up the Secrets Provider for Kubernetes to support rotation with Push-to-File mode.
Which deployment option should be used?
A. Init container
B. Service Broker
C. Sidecar
D. Application container
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Refer to the exhibit.

How can you confirm that the Follower has a current copy of the database?
A. Retrieve the credential from a test application on the Leader cluster; then retrieve against the Follower and compare if they are accurate.
B. Compare the pgcurrentxlog_locationlocation from the Leader to the Follower you need to validate against.
C. Count the number of components in pgstartreplication and compare this to the total number of Followers in the deployment.
D. Validate that the Follower container ID matches the node in the info endpoint on the Leader.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
When loading policy, you receive a 422 Response from Conjur with a message.
What could cause this issue?
A. misconfigured Load Balancer health check
B. malformed Policy file
C. incorrect Vault Conjur Synchronizer URL
D. incorrect Leader URL
正解：B
解説: (Topexam メンバーにのみ表示されます)