Central Policy Manager (CPM) Flashcards
7 cards from real CAD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Central Policy Manager (CPM) flashcards as text
What is the primary function of the Central Policy Manager (CPM) in CyberArk?
Answer: Automatically rotating and verifying privileged account passwords
The CPM is responsible for automatically rotating, verifying, and reconciling privileged account passwords on target systems according to defined platform policies.
Which CyberArk component does the CPM primarily interact with to store and retrieve credentials during password rotation?
Answer: Digital Vault
The CPM retrieves the current credentials from the Digital Vault, connects to the target system to change the password, and then stores the updated password back in the Digital Vault.
What mechanism does the CPM use to connect to and manage passwords on different types of target systems (e.g., Windows, Unix, Oracle)?
Answer: CPM plugins (platform plugins)
CPM plugins (also called platform plugins) are modular components that define how the CPM connects to and manages passwords on specific target system types.
Which configuration file contains the Vault address and connection parameters used by the CPM to connect to the Digital Vault?
Answer: vault.ini
The vault.ini file contains the Vault address, port, and connection parameters required by CyberArk components, including the CPM, to connect to the Digital Vault.
What happens when the CPM fails to change a password on a target system?
Answer: The CPM logs the failure and retries according to the configured retry policy
When a password change fails, the CPM logs the error in pm.log and retries according to the retry interval and retry count defined in the platform or CPM configuration.
Which Master Policy rule, when enabled, instructs the CPM to periodically rotate account passwords on a scheduled basis?
Answer: Require periodic password change
The 'Require periodic password change' Master Policy rule enables the CPM to automatically rotate account passwords at intervals defined in the associated platform settings.
What is the purpose of a 'Reconcile' account in CyberArk CPM?
Answer: To reset an account's password when the CPM cannot change it using the regular account credentials
A reconcile account is used to forcibly reset a managed account's password when the CPM cannot change it directly, such as when the password has been manually changed outside of CyberArk.