CAD Enterprise Password Vault Policies 4

Question 1

When a CyberArk CPM fails to verify a password on a remote target, what status is assigned to the account?

Accepted Answer

Exception

Answer

When the CPM cannot verify or change a password, the account is placed in 'Exception' status, alerting administrators to the failure.

Question 2

In CyberArk, what is the function of the 'Reconcile' operation performed by the CPM?

Accepted Answer

Resets a password using a reconcile account when the current password is unknown

Answer

Reconciliation allows the CPM to reset an account's password using a separate reconcile account when the current password is out of sync or unknown.

Question 3

Which CyberArk platform property must be configured to allow the CPM to log on to a target Windows server and change a local account password?

Accepted Answer

ManageAs

Answer

The ManageAs property (or associated reconcile/logon account) tells the CPM which privileged account to use when connecting to the target to perform the change.

Question 4

A CyberArk policy requires passwords to be at least 14 characters. An application hard-codes a 12-character password. What should the CyberArk administrator do?

Accepted Answer

Create a platform exception allowing 12-character passwords for that account

Answer

A platform exception or account-level override can lower the minimum password length for specific accounts without affecting the global policy.

Question 5

What does the 'PasswordNeverExpires' flag in CyberArk account properties indicate to the CPM?

Accepted Answer

The CPM should not automatically rotate the password based on schedule

Answer

Setting PasswordNeverExpires tells the CPM to skip scheduled automatic rotation while still allowing manual changes.

(CAD) CyberArk Defender Certification Practice Test

(CAD) CyberArk Defender Certification Practice Test

CAD Enterprise Password Vault Policies 4