CyberArk Defender – PAM — Question 26

When an account is unable to change its own password, how can you ensure that password reset with the reconcile account is performed each time instead of a change?

Answer options

• A. Set the parameter RCAllowManualReconciliation to Yes.
• B. Set the parameter ChangePasswordinResetMade to Yes.
• C. Set the parameter IgnoreReconcileOnMissingAccount to No.
• D. Set the UnlockUserOnReconcile to Yes.

Correct answer: B

Explanation

The correct answer is B, as setting the ChangePasswordinResetMade parameter to Yes allows the system to perform a password reset rather than a change when necessary. The other options do not specifically address the requirement for ensuring that password resets are prioritized over changes in this scenario.