CyberArk PAM-CDE Recertification — Question 48

You receive this error:
"Error in changepass to user domain\user on domain server(\domain.(winRc=5) Access is denied."
Which root cause should you investigate?

Answer options

• A. The account does not have sufficient permissions to change its own password.
• B. The domain controller is unreachable.
• C. The password has been changed recently and minimum password age is preventing the change.
• D. The CPM service is disabled and will need to be restarted.

Correct answer: C

Explanation

The correct answer is C because if the password has been recently changed, the minimum password age policy will prevent further changes until that period expires. Option A is incorrect as it implies a lack of permissions rather than a policy restriction, while B is not relevant since the error pertains to access rights, and D is unrelated since the CPM service does not impact password change restrictions.