CyberArk Defender – PAM — Question 113

You receive this error:
"Error in changepass to user domain\user on domain server(\domain.(winRc=5) Access is denied."
Which could be the cause?

Answer options

• A. The account does not have sufficient permissions to change its own password.
• B. The domain controller is unreachable.
• C. The password has been changed recently and minimum password age is preventing the change.
• D. The CPM service is disabled and will need to be restarted.

Correct answer: A

Explanation

The correct answer is A because the error indicates a permissions issue, suggesting that the user does not have the required rights to change their password. Option B is incorrect as the error does not indicate any connectivity issues. Option C does not apply here, as the error specifically states 'Access is denied' rather than a restriction due to password age. Option D is irrelevant since the CPM service status is not mentioned in the error message.