CyberArk Defender – Endpoint Privilege Manager — Question 44

After a clean installation of the EPM agent, the local administrator password is not being changed on macOS and the old password can still be used to log in.
What is a possible cause?

Answer options

• A. Secure Token on macOS endpoint is not enabled.
• B. EPM agent is not able to connect to the EPM server.
• C. After installation, Full Disk Access for the macOS agent to support EPM policies was not approved.
• D. Endpoint password policy is too restrictive.

Correct answer: A

Explanation

The correct answer is A because if the Secure Token is not enabled, the EPM agent cannot change the local administrator password. Options B, C, and D do not directly relate to the ability of the EPM agent to change the password, as they pertain to connectivity and permissions, rather than the Secure Token requirement.