Correct Answer:

Explanation

The correct order for prioritization of the findings is as follows:
A new vulnerability scanner project is nearing completion and is expected to go into production soon.
This scanner is owned by the Security Team that owns CyberArk. This finding should be prioritized first because it has the highest urgency, feasibility, and alignment with the Security Team's goals. The vulnerability scanner is a critical security tool that needs to protect its credentials from unauthorized access. The Security Team can leverage their own expertise and authority to implement the Secrets Manager solution for this project without much delay or dependency.
A large, high performance application under PCI DSS regulation will require many CPs. This will require a license purchase. The procurement process can take 6-12 months. The development team is eager to work with Security on this project. This finding should be prioritized second because it has a high impact, compliance requirement, and stakeholder support. The application handles sensitive payment card data that needs to be secured by the Secrets Manager solution. The development team is willing to collaborate with the Security Team on this project and can help with the technical aspects of the implementation. However, this finding also has a high cost and a long lead time due to the license purchase and the procurement process.
A small, internally developed application under HIPPA regulation needs updates to the application code to retrieve secrets from a Secrets Manager solution. The development team stated they cannot accommodate this work before next quarter. This finding should be prioritized third because it has a moderate impact, compliance requirement, and feasibility. The application handles protected health information that needs to be secured by the Secrets Manager solution. The development team is aware of the need to update the application code to integrate with the Secrets Manager solution, but they have other priorities and constraints that prevent them from doing so in the near term.
Here's the reasoning behind this order:
1. New vulnerability scanner project:
This project directly impacts CyberArk's Security Team, making it a high priority due to potential internal security concerns. Additionally, its near-completion state suggests a quicker implementation timeframe.
2. Large application under PCI DSS:
While this application requires significant resources and time investment due to license purchase and development, its high performance and PCI DSS regulation compliance mandate prioritization. Delaying this project could potentially lead to security vulnerabilities and compliance issues.
3. Small application under HIPAA:
Although HIPAA regulation necessitates compliance, the application's size and development team's delay request suggest a lower priority compared to the previous two projects. However, it should still be addressed within the next quarter as mandated by the development team.

Correct Answer:

Explanation
The correct sequence of steps to configure the Conjur Cluster with 3rd-party certificates is as follows:
Import 3rd-party certificates to the Leader using the command: docker exec mycontainer evoke ca import --force --root <path-to-root-certificate> --chain <path-to-chain-certificate>1 Configure the Leader using the command: docker exec mycontainer evoke configure master
--accept-eula --hostname <load-balancer-dns> --admin-password <password> <account-name>1 Verify the Conjur Leader configuration using the command: docker exec mycontainer evoke role1 Configure the Standbys using the command: docker exec mycontainer evoke configure standby
--master-address <leader-ip-address> --master-fingerprint <leader-fingerprint>1 References: 1: Certificate requirements

Correct Answer: C  🗳️

Explanation: Only visible for PassLeader members. You can sign-up / login (it's free).

Correct Answer: A  🗳️

Explanation: Only visible for PassLeader members. You can sign-up / login (it's free).