CyberArk Secret-Sen 問題集

質問 1：
You have a PowerShell script that is being used on 1000 workstations. It requires a Windows Domain credential that is currently hard coded in the script.
What is the simplest solution to remove that credential from the Script?
A. Modify the script to make a SOAP call to retrieve the secret from the Central Credential Provider.
B. Modify the script to use the CLI SDK to fetch the secret at runtime using Credential Providers installed on each workstation.
C. Modify the script to run on WebSphere using the Application Server Credential Provider to retrieve the secret.
D. Use Conjur Summon to invoke the script and inject the secret at run time.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
You are setting up the Secrets Provider for Kubernetes to support rotation with Push-to-File mode.
Which deployment option should be used?
A. Init container
B. Service Broker
C. Sidecar
D. Application container
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Match each use case to the appropriate Secrets Manager Solution.

正解：




質問 4：
When loading policy, you receive a 422 Response from Conjur with a message.
What could cause this issue?
A. misconfigured Load Balancer health check
B. malformed Policy file
C. incorrect Vault Conjur Synchronizer URL
D. incorrect Leader URL
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Arrange the steps of a Conjur authentication flow in the correct sequence.

正解：

Explanation

References:
CyberArk Sentry Secrets Manager
documentation: https://docs.cyberark.com/Portal/Content/Resources/_TopNav/cc_Portal.htm CyberArk Sentry Secrets Manager course materials: https://training.cyberark.com/learn CyberArk whitepapers and technical resources: https://www.cyberark.com/resources/home/cyberark-secrets-manager The authentication flow begins with the requester presenting their credentials to Conjur. This can be in the form of a username and password, an API key, or another supported method.
Conjur verifies the presented credentials against its internal database. If the credentials are valid, Conjur generates and returns a short-lived access token to the requester.
The requester includes the access token with every subsequent request to access Conjur resources. This allows Conjur to identify the requester and authorize their access to specific secrets and functionalities based on configured policies.
Finally, each request is evaluated against the Conjur RBAC (Role-Based Access Control) rules defined in its policy. These rules determine which users and roles have access to specific resources and what actions they can perform. Only requests that comply with these rules are granted access.

質問 6：
When attempting to retrieve a credential managed by the Synchronizer, you receive this error:

What is the cause of the issue?
A. The Conjur Leader has lost upstream connectivity to the Vault Conjur Synchronizer.
B. The host does not have access to the credential.
C. The Vault Conjur Synchronizer has crashed and needs to be restarted.
D. The path to the credential was not properly encoded.
正解：B
解説: (Topexam メンバーにのみ表示されます)