CAD Enterprise Password Vault Policies 2

Question 1

In CyberArk EPV, which platform policy setting controls how frequently the CPM automatically rotates a privileged account password?

Accepted Answer

ChangeFrequency

Answer

ChangeFrequency (also called 'Interval') in the platform policy defines how often the CPM automatically changes the password.

Question 2

Which CyberArk policy setting prevents a user from checking out the same password twice in a row without an intervening checkout by another user?

Accepted Answer

ExclusiveAccountMode

Answer

Exclusive Account Mode ensures only one user holds a password at a time, preventing consecutive re-checkout by the same user.

Question 3

A CyberArk platform's 'OneTimePassword' policy is enabled. What happens to the password after the session ends?

Accepted Answer

It is immediately changed by the CPM

Answer

When OneTimePassword is enabled, the CPM immediately changes the password after the session is terminated or the account is checked in.

Question 4

Which EPV Safe member permission allows a user to retrieve account passwords but NOT modify the Safe's properties?

Accepted Answer

Retrieve accounts

Answer

'Retrieve accounts' grants the ability to view or copy passwords without granting administrative control over the Safe.

Question 5

In CyberArk, what is the purpose of the 'MinValidityPeriod' platform parameter?

Accepted Answer

Prevents password change for a minimum number of days after last change

Answer

MinValidityPeriod ensures the CPM will not change a password again until the specified number of days have passed since the last change.

(CAD) CyberArk Defender Certification Practice Test