CAD Central Policy Manager (CPM) 2

Question 1

Which Safe permission must the CPM user account have on a Safe in order to perform automatic password management for accounts stored in that Safe?

Accepted Answer

Initiate CPM password management operations

Answer

The 'Initiate CPM password management operations' permission explicitly grants the CPM user account the ability to trigger password change, verify, and reconcile operations on accounts in the Safe.

Question 2

What is a 'Platform' in the context of CyberArk CPM configuration?

Accepted Answer

A configuration template defining how CPM manages a specific type of target system

Answer

A Platform is a configuration template that defines the CPM plugin, connection method, password policy parameters, and other settings used to manage a specific target system type such as Windows Local or Unix SSH.

Question 3

When troubleshooting CPM password change failures, which log file on the CPM server should be checked first?

Accepted Answer

pm.log (Password Manager log)

Answer

The pm.log file, located in the CPM installation directory, contains detailed records of all password management operations including failures, error codes, and retry attempts.

Question 4

What does the CPM 'Verify' operation confirm?

Accepted Answer

That the password stored in the Vault matches the actual current password on the target system

Answer

The Verify operation attempts to authenticate to the target system using the password currently stored in the Vault, confirming that the stored password is accurate and the account is accessible.

Question 5

How does CyberArk CPM handle managed accounts for which there are dependent services (e.g., Windows services running as that account)?

Accepted Answer

CPM can automatically update dependent services, scheduled tasks, and COM+ applications after changing the account password

Answer

CyberArk CPM supports account dependencies and can automatically update Windows services, scheduled tasks, and COM+ applications to use the new password after rotating the parent account's credentials.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD Central Policy Manager (CPM) 2