Enterprise Password Vault Policies Flashcards
7 cards from real CAD practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Enterprise Password Vault Policies flashcards as text
In CyberArk EPV, which platform policy setting controls how frequently the CPM automatically rotates a privileged account password?
Answer: ChangeFrequency
ChangeFrequency (also called 'Interval') in the platform policy defines how often the CPM automatically changes the password.
Which CyberArk policy setting prevents a user from checking out the same password twice in a row without an intervening checkout by another user?
Answer: ExclusiveAccountMode
Exclusive Account Mode ensures only one user holds a password at a time, preventing consecutive re-checkout by the same user.
A CyberArk platform's 'OneTimePassword' policy is enabled. What happens to the password after the session ends?
Answer: It is immediately changed by the CPM
When OneTimePassword is enabled, the CPM immediately changes the password after the session is terminated or the account is checked in.
Which EPV Safe member permission allows a user to retrieve account passwords but NOT modify the Safe's properties?
Answer: Retrieve accounts
'Retrieve accounts' grants the ability to view or copy passwords without granting administrative control over the Safe.
In CyberArk, what is the purpose of the 'MinValidityPeriod' platform parameter?
Answer: Prevents password change for a minimum number of days after last change
MinValidityPeriod ensures the CPM will not change a password again until the specified number of days have passed since the last change.
Which component in the CyberArk solution is responsible for enforcing dual-control password access workflow?
Answer: PVWA
The PVWA (Password Vault Web Access) manages the dual-control access request and approval workflow for privileged accounts.
A policy requires that passwords contain at least two uppercase letters, two digits, and one special character. Where in CyberArk is this complexity rule configured?
Answer: Platform Password Properties
Password complexity rules such as character requirements are defined in the Platform's Password Properties section.