Câu 10: GUARD: CyberArk Guardian

ClientABC is moving into their DevOps space. They currently are using CCP and are considering Conjur. They've noticed that there is quite a bit of overlap. How would you explain the difference between the two? (Choose two).

1. A. Conjur is well suited for the velocity of the CI/CD pipeline because it includes native authentication such as API keys, 1AM, and OAuth. You store the secret at the project folder level. — đáp án hiện tại
2. B. CCP is a good choice if you're using client certificate authentication. With CCP you need to authenticate and pass an application ID and your query for your secret. — đáp án hiện tại
3. C. Conjur is best suited for static secrets. You only need to pass an API key to make the call. This is suited well for the velocity of the CI/CD pipeline because it integrates seamlessly with containers.
4. D. CCP is best used for ad-hoc scripts. It's a great choice because you're able to use enhanced authentication mechanisms such as 'Path' and 'Hash'.
5. E. When trying to decide between the two, you should generally choose CCP, as Conjur cannot be integrated with the same vault that is used for CyberArk PAM.