CAD Central Policy Manager (CPM) 2

Question 1

Which Safe permission must the CPM user account have on a Safe in order to perform automatic password management for accounts stored in that Safe?

Accepted Answer

Initiate CPM password management operations

Answer

Manage Safe

Answer

Access Safe without confirmation

Answer

Unlock accounts

Question 2

What is a 'Platform' in the context of CyberArk CPM configuration?

Accepted Answer

A configuration template defining how CPM manages a specific type of target system

Answer

The operating system on which CyberArk components are installed

Answer

The hardware infrastructure hosting the Digital Vault

Answer

A group of Safes sharing common Master Policy settings

Question 3

When troubleshooting CPM password change failures, which log file on the CPM server should be checked first?

Accepted Answer

pm.log (Password Manager log)

Answer

CyberArk Vault audit log

Answer

Windows Event Viewer System log

Answer

PVWA IIS access log

Question 4

What does the CPM 'Verify' operation confirm?

Accepted Answer

That the password stored in the Vault matches the actual current password on the target system

Answer

That the Vault is reachable from the CPM server

Answer

That the CPM plugin is correctly installed and configured

Answer

That network connectivity between the CPM and target system is functioning

Question 5

How does CyberArk CPM handle managed accounts for which there are dependent services (e.g., Windows services running as that account)?

Accepted Answer

CPM can automatically update dependent services, scheduled tasks, and COM+ applications after changing the account password

Answer

CPM ignores service accounts that have dependencies

Answer

CPM requires manual reconfiguration of all dependent services after each password change

Answer

CPM disables all dependent services before changing the password

Question 6

In CyberArk, what is the primary use case for CPM Proxy (routing CPM through an intermediary)?

Accepted Answer

To allow CPM to manage accounts on systems in network segments that are not directly accessible from the CPM server

Answer

To load balance CPM operations across multiple CPM servers

Answer

To provide a REST API interface for third-party password management integration

Answer

To cache frequently used credentials for faster retrieval

Question 7

What is the role of a 'Logon Account' in a CyberArk CPM platform configuration?

Accepted Answer

A separate privileged account that CPM uses to authenticate to the target system before changing the managed account's password

Answer

The account that end users use to log into the PVWA

Answer

The CPM Windows service account used to connect to the Vault

Answer

The account used for generating compliance and audit reports