CyberArk Secret-Sen 問題集

質問 1：
When using the Seed Fetcher to deploy Kubernetes Followers, an error occurs in the Seed Fetcher container.
You check the logs and discover that although the Seed Fetcher was able to authenticate, it shows a 500 error in the log and does not successfully retrieve a seed file. What is the cause?
A. The synchronizer service crashed and needs to be restarted.
B. The certificate based on the Follower DNS name is not present on the Leader.
C. The Leader does not have the authenticator webservice enabled.
D. The host you configured does not have access to see the certificates.
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
How many Windows and Linux servers are required for a minimal Conjur deployment that integrates with an existing CyberArk PAM Vault environment, supports high availability, and is redundant across two geographically disparate regions?
A. 3 Linux servers, 1 Windows server
B. 5 Linux servers, 2 Windows servers
C. 10 Linux servers, 2 Windows server
D. 9 Linux servers, 2 Windows servers
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A customer wants to minimize the Kubernetes application code developers must change to adopt Conjur for secrets access.
Which solutions can meet this requirement? (Choose two.)
A. Application Server Credential Provider
B. Secretless
C. CPM Push-to-File
D. Secrets Provider
E. authn-Azure
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 4：
Findings were obtained after cataloging pending Secrets Manager use cases.
Arrange the findings in the correct order for prioritization.

正解：

Explanation

The correct order for prioritization of the findings is as follows:
A new vulnerability scanner project is nearing completion and is expected to go into production soon.
This scanner is owned by the Security Team that owns CyberArk. This finding should be prioritized first because it has the highest urgency, feasibility, and alignment with the Security Team's goals. The vulnerability scanner is a critical security tool that needs to protect its credentials from unauthorized access. The Security Team can leverage their own expertise and authority to implement the Secrets Manager solution for this project without much delay or dependency.
A large, high performance application under PCI DSS regulation will require many CPs. This will require a license purchase. The procurement process can take 6-12 months. The development team is eager to work with Security on this project. This finding should be prioritized second because it has a high impact, compliance requirement, and stakeholder support. The application handles sensitive payment card data that needs to be secured by the Secrets Manager solution. The development team is willing to collaborate with the Security Team on this project and can help with the technical aspects of the implementation. However, this finding also has a high cost and a long lead time due to the license purchase and the procurement process.
A small, internally developed application under HIPPA regulation needs updates to the application code to retrieve secrets from a Secrets Manager solution. The development team stated they cannot accommodate this work before next quarter. This finding should be prioritized third because it has a moderate impact, compliance requirement, and feasibility. The application handles protected health information that needs to be secured by the Secrets Manager solution. The development team is aware of the need to update the application code to integrate with the Secrets Manager solution, but they have other priorities and constraints that prevent them from doing so in the near term.
Here's the reasoning behind this order:
1. New vulnerability scanner project:
This project directly impacts CyberArk's Security Team, making it a high priority due to potential internal security concerns. Additionally, its near-completion state suggests a quicker implementation timeframe.
2. Large application under PCI DSS:
While this application requires significant resources and time investment due to license purchase and development, its high performance and PCI DSS regulation compliance mandate prioritization. Delaying this project could potentially lead to security vulnerabilities and compliance issues.
3. Small application under HIPAA:
Although HIPAA regulation necessitates compliance, the application's size and development team's delay request suggest a lower priority compared to the previous two projects. However, it should still be addressed within the next quarter as mandated by the development team.

質問 5：
When working with Summon, what is the purpose of the secrets.yml file?
A. It is where you define which secrets to retrieve.
B. It is where Summon outputs the secret value after retrieval.
C. It is where you store the Conjur URL and host API key.
D. It is the log file for Summon.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An application is having authentication issues when trying to securely retrieve credential's from the Vault using the CCP webservices RESTAPI. CyberArk Support advised that further debugging should be enabled on the CCP server to output a trace file to review detailed logs to help isolate the problem.
What best describes how to enable debug for CCP?
A. Edit the basic_appprovider.conf, change the "AIMWebServiceTrace" value, and restart the provider.
B. Edit web.config. change the "AIMWebServiceTrace" value, restart Windows Web Server (IIS)
C. From the command line, run appprvmgr.exe update_config logging=debug.
D. In the PVWA, go to the Applications tab, select the Application in question, go to Options > Logging and choose Debug.
正解：B
解説: (Topexam メンバーにのみ表示されます)