CAD Central Policy Manager (CPM) 3

Question 1

Which CyberArk component performs the actual on-demand password change when a user returns a checked-out account (with 'Change password automatically after check-in' enabled)?

Accepted Answer

Central Policy Manager

Answer

The CPM performs the on-demand password change triggered by an account check-in event, connecting to the target system to rotate the password immediately after the user releases the account.

Question 2

When 'Enforce check-in/check-out exclusive access' is enabled in the Master Policy, what is the typical CPM behavior for a currently checked-out account?

Accepted Answer

CPM respects the check-out state and waits until the account is checked in before changing the password

Answer

With exclusive access enforced, the CPM waits for the account to be checked in before rotating its password, preventing a mid-session password change that would lock out the active user.

Question 3

What does the account status 'Disconnected' indicate for a CPM-managed account in the Vault?

Accepted Answer

CPM was unable to establish a connection to the target system to perform password management

Answer

'Disconnected' status indicates that the CPM attempted to reach the target system for password management but could not establish a connection, often due to network issues, firewall rules, or the system being offline.

Question 4

What is the significance of the CPM 'HeadStartInterval' (Grace Period) parameter?

Accepted Answer

A buffer period that prevents CPM from immediately rotating a password after it has been accessed, giving users time to finish their work

Answer

The HeadStartInterval (Grace Period) prevents the CPM from immediately changing a password after it was retrieved, ensuring users are not locked out while actively using the credential.

Question 5

A CPM password change fails with an 'Access Denied' error. What is the most likely root cause?

Accepted Answer

The account used to connect to the target system lacks sufficient permissions to change the password

Answer

An 'Access Denied' error during CPM password change most commonly indicates that the managed account or its configured logon account does not have the necessary privileges on the target system to change the password.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD Central Policy Manager (CPM) 3