A customer wants to ensure applications can retrieve secrets from Conjur in three different data centers if the Conjur Leader becomes unavailable. Conjur Followers are already deployed in each of these data centers.
How should you architect the solution to support this requirement?
A. Deploy a CP provider on the Follower server to provide offline caching capabilities for the Follower.
B. Deploy a Standby in each data center that can be promoted to the role of Leader.
C. Extend the auto failover cluster to include Standby in each data center and allow for automatic recovery should the Leader become unavailable.
D. No changes are required.
正解:C
解説: (Pass4Test メンバーにのみ表示されます)
質問 2:
In a 3-node auto-failover cluster, the Leader has been brought down for patching that lasts longer than the configured TTL. A Standby has been promoted.
Which steps are required to repair the cluster when the old Leader is brought back online?
A. Generate a Standby seed for the newly promoted Leader.
Stop and remove the container on the new Leader, then rebuild it as a new Standby.
Re-enroll the Standby to the cluster and re-base replication of the 3rd Standby back to the old Leader.
B. Generate standby seeds for the newly-promoted Leader and the 3rd Standby Stop and remove the containers and then rebuild them as new Standbys.
On both new Standbys, re-enroll the node to the cluster.
C. On the new Leader, generate a Standby seed for the old Leader node and add it to the cluster member list.
Rebuild the old Leader as a new Standby and then re-enroll the node to the cluster.
D. On the new Leader, generate a Standby seed for the old Leader node and re-upload the auto-failover policy in "replace" mode.Rebuild the old Leader as a new Standby, then re-enroll the node to the cluster.
正解:C
解説: (Pass4Test メンバーにのみ表示されます)
質問 3:
A customer wants to minimize the Kubernetes application code developers must change to adopt Conjur for secrets access.
Which solutions can meet this requirement? (Choose two.)
A. CPM Push-to-File
B. Secretless
C. authn-Azure
D. Secrets Provider
E. Application Server Credential Provider
正解:B,D
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
During the configuration of Conjur, what is a possible deployment scenario?
A. The Conjur Leader cluster and Followers are deployed inside a Kubernetes environment.
B. The Leader cluster is deployed outside a Kubernetes environment; Followers and Standbys can run inside or outside the environment.
C. The Leader and Followers are deployed outside of a Kubernetes environment; Slandbys can run inside a Kubernetes environment.
D. The Conjur Leader cluster is deployed outside of a Kubernetes environment; Followers can run inside or outside the environment.
正解:B
解説: (Pass4Test メンバーにのみ表示されます)
質問 5:
What is the correct process to upgrade the CCP Web Service?
A. Double-click the AimWebService.msi and select upgrade.
B. Double-click the Credential Provider installer executable and select upgrade.
C. Uninstall and reinstall the CCP Web Service.
D. Run "sudo yum update aimprv" from the CLI.
正解:C
解説: (Pass4Test メンバーにのみ表示されます)
1048 お客様のコメント







池松** -
三日前に受験したんだが、この問題集は出題範囲を90%網羅していてびっくりしました。合格だね。