There is a requirement for a password to change between 01:00 and 03:00 on Saturdays and Sundays; however, this does not work consistently. Which platform setting may be the cause?
A.
The Interval setting for the platform is incorrect and must be less than 120.
B.
The ImmediateInterval setting for the platform is incorrect and must be greater than or equal to 1.
C.
The DaysToRun setting for the platform is incorrect and must be set to Sat,Sun.
D.
The HeadStartInterval setting for the platform is incorrect and must be set to 0.
Different value than 0 for HeadStartInterval will cause : "not work consistently change between 01:00 and 03:00 on Saturdays and Sundays".
F.e when set to 1 then password will not be changed on Sundays as it was speed up 1 day.
When it comes to Interval setting .
https://cyberark.my.site.com/s/article/00002885
"CPM 9.10 and up, when FromHour to ToHour is used, the interval will be used only within the FromHour to ToHour. Outside those hours, the interval will be ignored."
So it looks like the interval is different than defualt or current and the only will change the password within the FromHour to ToHour.
As well in article that someone has put here :
https://cyberark.my.site.com/s/article/00004112
This is a tricky one but I'm inclined to go A. as well, the interval parameter controls how often the CPM looks for system-initiated CPM work. If it is >120 (2hours) and the trigger happens any later than 01:00, the CPM sees the trigger and tries to act at 3:01 or later which is outside the window.
https://docs.cyberark.com/PAS/13.2/en/Content/PASREF/Automatic%20Password%20Management%20-%20General.htm?tocpath=Administrator%7CReferences%7CConfigure%20the%20system%20through%20PVWA%7CPlatform%20properties%7CAutomatic%20Password%20Management%7C_____1#:~:text=value%3A%205-,Interval,-The%20number%20of
It's also worth noting that for versions up to v9.10 there was a formula issued by CyberArk to calculate the value of this parameter when used in conjunction with "FromHour" and "ToHour". The rule was (Timeframe of FromHour ToHour in minutes/2)-1=Interval. For example if set from 2 to 4 am, it would be have been (120/2)-1=59.
https://cyberark-customers.force.com/s/article/00004112
After having checked on lab, there's no DaysToRun parameter, only ExecutionDays.
So C is not the correct answer as the parameter invoked doesn't exist.
D is the right answer.
Interval - The number of minutes after which the Central Policy Manager re-reads the list of platforms, to handle new platforms or remove deleted ones.
So the interval must be less than 120 minutes to make sure that CPM will change password within that 2 hour window.
The interval setting is to control how often the CPM looks for system-initiated CPM work. If it is >120 say 121 - the trigger happens at 01:00, CPM sees the trigger and tries to act at 3:01. It's outside the window, so it can't change the password.
Interval is the number of minutes after which the Central Policy Manager re-reads the list of platforms.
ImmediateInterval determines the number of minutes it takes before the first rotation attempt.
HeadStartInterval is the number of days before the password expires.
DaysToRun doesn't exist. ExecuteDays is the answer. I think is the parameter should appear in the exam and maybe is the parameter the autor meant
Maybe. Yes.
Because if HeadStartInterval = 0 means the password will be change the same expiration day. If not equal 0, the password can change before Sat or Sun and other weeks/months can fix that desired days...
Good observation.
DaystoRun settting does not exists, HeadStartinterval default is 0..
So I think it must be D
upvoted 3 times
...
This section is not available anymore. Please use the main Exam Page.PAM-SEN Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
43aa45a
5 months, 3 weeks agoCavdog
1 year, 1 month agoCavdog
1 year, 1 month agorlam
1 year, 2 months agoFabri59
1 year, 4 months agolaternak26
1 year, 6 months agoTraciG
1 year, 6 months agopenuelaandy
1 year, 6 months agoAtt84
1 year, 6 months agopenuelaandy
1 year, 6 months agoAtt84
1 year, 6 months ago