Secret-Sen 무료 덤프문제 온라인 액세스

In the event of a failover of the Vault server from the primary to the DR, which configuration option ensures that a CP will continue being able to refresh its cache?

• A.In the Password Vault Web Access UI, add the IP address of the DR Vault in the Disaster Recovery section under Applications > Options.
• B.In the Conjur UI, add the IP address of the DR Vault in the Disaster Recovery section under Cluster Config > Credential Provider > Options.
• C.Add the IP address of the DR vault to the "Address" parameter in the file Vault.ini.file on the machine on which the CP is installed.
• D.Add the DR Vault IP address to the "Address" parameter in the file main_appprovider.conf.
  <platform>.<version> found in the AppProviderConf safe.

You modified a Conjur host policy to change its annotations for authentication.
How should you load the policy to make those changes?

• A.Use the "update" method (e.g. conjur policy load - -update <branch> <policy-file>).
• B.Use the "replace" method (e.g. conjur policy load - -replace <branch> <policy-file>).
• C.Use the "delete" method (e.g. conjur policy load - -delete <branch> <policy-file>).
• D.Use the default "append" method (e.g. conjur policy load <branch> <policy-file>).

After manually failing over to your disaster recovery site (Site B) for testing purposes, you need to failback to your primary site (Site A).
Which step is required?

• A.Contact CyberArk for a new license file.
• B.Reconfigure the Vault Conjur Synchronizer to point to the new Conjur Leader.
• C.Generate a seed for the new Leader to be deployed in Site A.
• D.Trigger autofailover to promote the Standby in Site A to Leader.

What is the most maintenance-free way to ensure a Conjur host's access reflects any changes made to accounts in a safe in the CyberArk vault?

• A.Write an automation script to update and load the host's policy using PATCH/update.
• B.Use yami anchor [&] and wildcard (*) syntax to maintain its list of permission grants.
• C.Grant the consumers group/role created by the Synchronizer for the Safe to the host.
• D.Use PVWA to add the Conjur host ID as a member of the Safe.

Arrange the steps to configure authenticators in the correct the sequence.

정답:

Explanation

Create an authenticator policy for each authenticator and then load the policy to Conjur.
Add each authenticator to conjur.yml using this format: <authenticator type> <SERVICE_ID>.
Execute evoke configuration apply.
Comprehensive Explanation: Authenticators are plugins that enable Conjur to authenticate requests from different types of clients, such as Kubernetes, Azure, or LDAP. To configure authenticators, you need to follow these steps:
Create an authenticator policy for each authenticator and then load the policy to Conjur. This step defines the authenticator as a resource in Conjur and grants permissions to the users or hosts that can use it. You can use the policy templates provided by Conjur for each authenticator type, or create your own custom policy. For more information, see Define Authenticator Policy.
Add each authenticator to conjur.yml using this format: <authenticator type> <SERVICE_ID>. This step enables the authenticator service on the Conjur server and specifies the service ID that identifies the authenticator instance. The service ID must match the one used in the policy. For more information, see Enable Authenticators.
Execute evoke configuration apply. This step applies the changes made to the conjur.yml file and restarts the Conjur service. This is necessary for the authenticator configuration to take effect. For more information, see Apply Configuration Changes.
References: The steps to configure authenticators are explained in detail in the Configure Authenticators section of the CyberArk Conjur Enterprise documentation. The image in the question is taken from the same source.