Explanation
Min Validity Period -The number of minutes to wait from the last retrieval of the password until it is replaced.
This gives the user a minimum period to be able to use the password before it is replaced. Use -1 to ignore this property. This parameter is also used to release exclusive accounts automatically Interval -" The number of minutes that the Central Policy Manager waits between running periodic searches for the platform. Note: It is recommended to leave the default value of 1440. If a change/verify policy has been configured, the Central Policy Manager will automatically align the periodic searches with the start of the defined timeframes."

Explanation
To check that the LDAP binding is using TCP/636, you can use the Test-NetConnection cmdlet from the PVWA to connect to the domain controller on Port 636. This method allows you to verify that the LDAP service is listening on the secure port and that the connection can be established using SSL/TLS, which is typically associated with port 6361.
References:
* CyberArk Docs - LDAP Integration2
* CyberArk Knowledge Article - How to test outgoing LDAP external directory connectivity to the vault

Explanation
To add an LDAP group to a CyberArk group, you need to use the Private Ark client and follow these steps1:
* In the Users and Groups tree, select the CyberArk group that you want to add the LDAP group to.
* In the Properties pane, click Member Of.
* Click Add > LDAP Group.
* In the LDAP Group dialog box, enter the name of the LDAP group and click OK. References: Add an LDAP group to a Vault group