CAD Central Policy Manager (CPM)

Question 1

What is the primary function of the Central Policy Manager (CPM) in CyberArk?

Accepted Answer

Automatically rotating and verifying privileged account passwords

Answer

Managing user access to the PVWA

Answer

Recording privileged sessions for audit purposes

Answer

Discovering privileged accounts across the network

Question 2

Which CyberArk component does the CPM primarily interact with to store and retrieve credentials during password rotation?

Accepted Answer

Digital Vault

Answer

Privileged Session Manager

Answer

Password Vault Web Access

Answer

Privileged Threat Analytics

Question 3

What mechanism does the CPM use to connect to and manage passwords on different types of target systems (e.g., Windows, Unix, Oracle)?

Accepted Answer

CPM plugins (platform plugins)

Answer

Session connectors

Answer

Password providers

Answer

Target adapters

Question 4

Which configuration file contains the Vault address and connection parameters used by the CPM to connect to the Digital Vault?

Accepted Answer

vault.ini

Answer

CPMparm.ini

Answer

basic.ini

Answer

pvconfig.ini

Question 5

What happens when the CPM fails to change a password on a target system?

Accepted Answer

The CPM logs the failure and retries according to the configured retry policy

Answer

The account is immediately disabled in the Vault

Answer

The original password is permanently deleted from the Vault

Answer

An alert is sent to all Vault administrators automatically

Question 6

Which Master Policy rule, when enabled, instructs the CPM to periodically rotate account passwords on a scheduled basis?

Accepted Answer

Require periodic password change

Answer

Enforce check-in/check-out exclusive access

Answer

Enforce one-time password access

Answer

Require dual control password access approval

Question 7

What is the purpose of a 'Reconcile' account in CyberArk CPM?

Accepted Answer

To reset an account's password when the CPM cannot change it using the regular account credentials

Answer

To synchronize passwords between multiple Vault instances

Answer

To verify the password stored in the Vault against the target system

Answer

To merge duplicate account entries found in the Vault