Online Access Free Secret-Sen Exam Questions

A Kubernetes application attempting to authenticate to the Follower load balancer receives this error:
ERROR: 2024/10/30 06:07:08 authenticator.go:139: CAKC029E Received invalid response to certificate signing request. Reason: status code 401 When checking the logs, you see this message:
authn-k8s/prd-cluster-01 is not enabled
How do you remediate the issue?

• A.A network issue is preventing the application from reaching the Follower; correct the issue and verity that it is resolved.
• B.Check the info endpoint on each Follower behind the load balancer and enable the authenticator on the Follower.
• C.Modify conjur.conf in /opt/conjur/etc/authenticators addinqthe authenticator webservice.
• D.Enable the authenticator in the Ul > Webservices > Authenticators > Enable and enable the appropriate authenticator webservice.

You are enabling synchronous replication on Conjur cluster.
What should you do?

• A.In Conjur web UI, click the Tools icon in the top right corner of the main window.
  Choose Conjur Cluster and click "Enable synchronous replication" in the entry for Standbys.
• B.Execute this command on the Leader:
  docker exec <container-name> sh -c"
  evoke replication sync that
  * B. Execute this command on each Standby:
  docker exec <container-name> sh -c"
  evoke replication sync that
  * C. In Conjur web UI, click the Tools icon in the top right corner of the main window.
  Choose Conjur Cluster and click "Enable synchronous replication" in the entry for Leader.

Match each cloud platform to the correct Conjur authenticator.

Correct Answer:

Explanation

AWS -> authn-iam
Azure -> authn-azure
GCP -> authn-gcp
JWT Provider -> authn-jwt
Explanation: Conjur supports different authenticators for different cloud platforms. Each authenticator allows a resource or service running on the cloud platform to authenticate to Conjur using a unique identity token signed by the cloud provider. The following are the descriptions of each authenticator:
authn-iam: Enables an AWS resource to use its AWS IAM role to authenticate with Conjur. The resource sends a request to the AWS Security Token Service (STS) to get a signed AWS access token, and then sends the token to Conjur for verification.
authn-azure: Enables an Azure resource to authenticate with Conjur. The resource sends a request to the Azure Instance Metadata Service (IMDS) to get a signed Azure access token, and then sends the token to Conjur for verification.
authn-gcp: Enables a Google Cloud Platform resource to authenticate with Conjur. The resource sends a request to the Google Cloud Identity and Access Management (IAM) service to get a signed Google identity token, and then sends the token to Conjur for verification.
authn-jwt: Enables an application to authenticate to Conjur using a JWT from a JWT Provider. The application obtains a JWT from the JWT Provider, and then sends the JWT to Conjur for verification.
References: You can find more information about the Conjur authenticators in the following resources:
Supported Conjur Cloud authenticators
Configure Conjur Cloud authenticators
GCP Authenticator

While installing the first CP in an environment, errors that occurred when the environment was created are displayed; however, the installation procedure continued and finished successfully.
What should you do?

• A.Run setup.exe again and select 'Recreate Vault Environment'. Provide the details of a user with more privileges when prompted by the installer.
• B.Review the PV WA lags to determine which REST API call used during the installation failed.
• C.Review the lag file 'CreateEnv.loq' and investigate any error messages it contains.
• D.Continue configuring the application to use the CP. No further action is needed since the successful installation makes the error message benign.

When working with Summon, what is the purpose of the secrets.yml file?

• A.It is the log file for Summon.
• B.It is where you define which secrets to retrieve.
• C.It is where you store the Conjur URL and host API key.
• D.It is where Summon outputs the secret value after retrieval.