CyberArk Secret-Sen 問題集

質問 1：
Match each use case to the appropriate Secrets Manager Solution.

正解：




質問 2：
What is a possible Conjur node role change?
A. A Follower may be promoted to a Leader.
B. A Standby may be promoted to a Follower.
C. A Leader may be demoted to a Standby in the event of a failover.
D. A Standby may be promoted to a Leader.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
You are upgrading an HA Conjur cluster consisting of 1x Leader, 2x Standbys & 1x Follower. You stopped replication on the Standbys and Followers and took a backup of the Leader.
Arrange the steps to accomplish this in the correct sequence.

正解：

Explanation

To upgrade an HA Conjur cluster, you need to follow these steps:
Stop and rename the Conjur Leader container and then start the new Leader. This step ensures that you have a backup of the old Leader container in case something goes wrong with the upgrade. You also need to specify the hostname and master-altnames parameters when starting the new Leader container to match the load balancer and the cluster nodes.
Restore the Leader from backup. This step restores the data and configuration from the old Leader to the new Leader. You need to use the evoke restore command with the backup file name and the account name as arguments.
Redeploy to the Standbys. This step upgrades the Standbys to the same version as the Leader. You need to stop and rename the old Standby containers and then start the new Standby containers with the evoke configure standby command. You also need to specify the hostname of the Leader and the Standby as arguments.
Enroll the Leader and Standbys into the auto-failover cluster. This step enables the auto-failover feature for the cluster, which allows the Standbys to automatically take over the role of the Leader in case of a failure. You need to use the evoke cluster enroll command on the Leader and the evoke cluster join command on the Standbys. You also need to provide the hostname and password of the Leader as arguments.
References: You can find more information about the upgrade process in the following resources:
Upgrade Conjur
Configure the Conjur cluster
Conjur architecture and deployment reference
Breathe Easy with a Self-Healing Conjur Cluster

質問 4：
If you rename an account or Safe, the Vault Conjur Synchronizer recreates these accounts and safes with their new name and deletes the old accounts or safes.
What does this mean?
A. The Vault-Conjur Synchronizer will recreate these accounts and safes with their exact same names.
B. Their permissions in Coniur must also be recreated to access them.
C. You can not rename an account or safe.
D. Their permissions in Coniur remain the same.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Arrange the manual failover configuration steps in the correct sequence.

正解：

Explanation

In the event of a Leader failure, you can perform a manual failover to promote one of the Standbys to be the new Leader. The manual failover process consists of the following steps:
Suspend replication for all Standbys and Followers and identify the best failover candidate. This step ensures that no data is lost or corrupted during the failover process. The best failover candidate is the Standby with the most advanced replication timeline, which means it has the most up-to-date data from the Leader.
Promote the failover candidate to be the new Leader. This step changes the role of the failover candidate from a Standby to a Leader, and updates its configuration accordingly. The new Leader can now accept write requests from clients and replicate data to other nodes.
Restore replication. This step re-establishes the replication connections between the new Leader and the other nodes, and rebases the replication of the other Standbys and Followers to the new Leader. This ensures that all nodes have the same data and are in sync with the new Leader.
References: The manual failover configuration steps are explained in detail in the Configure Manual Failover section of the CyberArk Conjur Enterprise documentation. The image in the question is taken from the same source.

質問 6：
What is the correct process to upgrade the CCP Web Service?
A. Double-click the AimWebService.msi and select upgrade.
B. Uninstall and reinstall the CCP Web Service.
C. Double-click the Credential Provider installer executable and select upgrade.
D. Run "sudo yum update aimprv" from the CLI.
正解：B
解説: (Topexam メンバーにのみ表示されます)