Central Policy Manager (CPM) Flashcards
7 cards from real CAD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Central Policy Manager (CPM) flashcards as text
Which Safe permission must the CPM user account have on a Safe in order to perform automatic password management for accounts stored in that Safe?
Answer: Initiate CPM password management operations
The 'Initiate CPM password management operations' permission explicitly grants the CPM user account the ability to trigger password change, verify, and reconcile operations on accounts in the Safe.
What is a 'Platform' in the context of CyberArk CPM configuration?
Answer: A configuration template defining how CPM manages a specific type of target system
A Platform is a configuration template that defines the CPM plugin, connection method, password policy parameters, and other settings used to manage a specific target system type such as Windows Local or Unix SSH.
When troubleshooting CPM password change failures, which log file on the CPM server should be checked first?
Answer: pm.log (Password Manager log)
The pm.log file, located in the CPM installation directory, contains detailed records of all password management operations including failures, error codes, and retry attempts.
What does the CPM 'Verify' operation confirm?
Answer: That the password stored in the Vault matches the actual current password on the target system
The Verify operation attempts to authenticate to the target system using the password currently stored in the Vault, confirming that the stored password is accurate and the account is accessible.
How does CyberArk CPM handle managed accounts for which there are dependent services (e.g., Windows services running as that account)?
Answer: CPM can automatically update dependent services, scheduled tasks, and COM+ applications after changing the account password
CyberArk CPM supports account dependencies and can automatically update Windows services, scheduled tasks, and COM+ applications to use the new password after rotating the parent account's credentials.
In CyberArk, what is the primary use case for CPM Proxy (routing CPM through an intermediary)?
Answer: To allow CPM to manage accounts on systems in network segments that are not directly accessible from the CPM server
CPM Proxy allows the CPM to reach and manage accounts on target systems located in isolated or restricted network segments by routing password management traffic through an accessible intermediary host.
What is the role of a 'Logon Account' in a CyberArk CPM platform configuration?
Answer: A separate privileged account that CPM uses to authenticate to the target system before changing the managed account's password
A Logon Account provides CPM with a separate set of credentials to first authenticate to the target system when the managed account itself lacks the privilege to change its own password.