SECRET-SEN

Question 1

When working with Summon, what is the purpose of the secrets.yml file?

1. It is where Summon outputs the secret value after retrieval.
2. It is where you define which secrets to retrieve.
3. It is where you store the Conjur URL and host API key.
4. It is the log file for Summon.

Question 2

You are deploying Kubernetes resources/objects as Conjur identities. In addition to Namespace and Deployment, from which options can you choose? (Choose two.)

1. ServiceAccount
2. Replicasets
3. Secrets
4. Tokenreviews
5. StatefulSet

Question 3

You modified a Conjur host policy to change its annotations for authentication. How should you load the policy to make those changes?

1. Use the default “append” method (e.g. conjur policy load <branch> ).
2. Use the “replace” method (e.g. conjur policy load – –replace <branch> ).
3. Use the “delete” method (e.g. conjur policy load – –delete <branch> ).
4. Use the “update” method (e.g. conjur policy load – –update <branch> ).

Question 4

When installing the Vault Conjur Synchronizer, you see this error: Forbidden - Logon Token is Empty – Cannot logon Unauthorized - What must you ensure to remediate the issue?

1. This admin user must not be logged in to other sessions during the Vault Conjur Synchronizer installation process.
2. You specified the correct url for Conjur and it is listed as a SAN on that url’s certificate.
3. You correctly URI encoded the url in the installation script.
4. You ran powershell as Administrator and there is sufficient space on the server on which you are running the installation.

Question 5

Refer to the exhibit. In which example will auto-failover occur?