QUESTION: 25

Which API endpoint can be used to discover secrets inside of Conjur?

Resources
Roles
Policies
WhoAmi

Answer(s): A

A Kubernetes application attempting to authenticate to the Follower load balancer receives this error:
ERROR: 2024/10/30 06:07:08 authenticator.go:139: CAKC029E Received invalid response to certificate signing request. Reason: status code 401 When checking the logs, you see this message:
authn-k8s/prd-cluster-01 is not enabled
How do you remediate the issue?

Check the info endpoint on each Follower behind the load balancer and enable the authenticator on the Follower.
Modify conjur.conf in /opt/conjur/etc/authenticators addinqthe authenticator webservice.
A network issue is preventing the application from reaching the Follower; correct the issue and verity that it is resolved.
Enable the authenticator in the Ul > Webservices > Authenticators > Enable and enable the appropriate authenticator webservice.

Answer(s): A

Reveal Solution Next Question

QUESTION: 27

When an application is retrieving a credential from Conjur, the application authenticates to Follower

Follower B receives the next request to retrieve the credential.
What happens next?
The Coniur Token is stateless and Follower B is able to validate the Token and satisfy the request.
The Coniur Token is stateful and Follower B is unable to validate the Token promptinq the application to re-authenticate.
The Coryur Token is stateless and Follower B redirects the request to Follower A to satisfy the request.
The Coniur Token is stateful and Follower B redirects the request to Follower A to satisfy the request.

Answer(s): A

Reveal Solution Next Question

QUESTION: 28

You have a PowerShell script that is being used on 1000 workstations. It requires a Windows Domain credential that is currently hard coded in the script.

What is the simplest solution to remove that credential from the Script?

Modify the script to use the CLI SDK to fetch the secret at runtime using Credential Providers installed on each workstation.
Modify the script to make a SOAP call to retrieve the secret from the Central Credential Provider.
Modify the script to run on WebSphere using the Application Server Credential Provider to retrieve the secret.
Use Conjur Summon to invoke the script and inject the secret at run time.

Answer(s): D

Reveal Solution Next Question

Free SECRET-SEN Exam Braindumps (page: 7)

QUESTION: 25

QUESTION: 26

QUESTION: 27

QUESTION: 28