最新的CyberArk Sentry - Secrets Manager - Secret-Sen免費考試真題
問題1
A customer has 100 .NET applications and wants to use Summon to invoke the application and inject secrets at run time.
Which change to the NET application code might be necessary to enable this?
Which change to the NET application code might be necessary to enable this?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題2
When attempting to configure a Follower, you receive the error:
Which port is the problem?
Which port is the problem?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題3
Match each cloud platform to the correct Conjur authenticator.
正確答案:
Explanation
AWS -> authn-iam
Azure -> authn-azure
GCP -> authn-gcp
JWT Provider -> authn-jwt
Explanation: Conjur supports different authenticators for different cloud platforms. Each authenticator allows a resource or service running on the cloud platform to authenticate to Conjur using a unique identity token signed by the cloud provider. The following are the descriptions of each authenticator:
authn-iam: Enables an AWS resource to use its AWS IAM role to authenticate with Conjur. The resource sends a request to the AWS Security Token Service (STS) to get a signed AWS access token, and then sends the token to Conjur for verification.
authn-azure: Enables an Azure resource to authenticate with Conjur. The resource sends a request to the Azure Instance Metadata Service (IMDS) to get a signed Azure access token, and then sends the token to Conjur for verification.
authn-gcp: Enables a Google Cloud Platform resource to authenticate with Conjur. The resource sends a request to the Google Cloud Identity and Access Management (IAM) service to get a signed Google identity token, and then sends the token to Conjur for verification.
authn-jwt: Enables an application to authenticate to Conjur using a JWT from a JWT Provider. The application obtains a JWT from the JWT Provider, and then sends the JWT to Conjur for verification.
References: You can find more information about the Conjur authenticators in the following resources:
Supported Conjur Cloud authenticators
Configure Conjur Cloud authenticators
GCP Authenticator
問題4
You are deploying Kubernetes resources/objects as Conjur identities.
In addition to Namespace and Deployment, from which options can you choose? (Choose two.)
In addition to Namespace and Deployment, from which options can you choose? (Choose two.)
正確答案: C,E
說明：（僅 VCESoft 成員可見）
問題5
How many Windows and Linux servers are required for a minimal Conjur deployment that integrates with an existing CyberArk PAM Vault environment, supports high availability, and is redundant across two geographically disparate regions?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題6
When loading policy, you receive a 422 Response from Conjur with a message.
What could cause this issue?
What could cause this issue?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題7
You are installing a Credential Provider on a Linux host. Arrange the installation steps in the correct sequence.
正確答案:
Explanation
The correct sequence of installation steps for a Credential Provider on a Linux host is as follows:
Download the correct install package to a directory on the Linux host and decompress1.
Copy the aimparms.sample file to /var/tmp/aimparms. Create a Credential File with an account with sufficient permissions to install. Modify the Vault.ini file to point to the correct vault2.
Install the correct Credential Provider package for the distribution of Linux using the command: rpm
-ivh CARKaim-<version+build number>.<distribution>.rpm2.
Check that the aimprv service is running using the command: service aimprv status2.
References: 1: Download the Credential Provider 2: Install Credential Provider on Linux / AIX
