The CyberArk High Availability Cluster typically runs minimal services on the passive node to ensure it is ready to take over in case the active node fails. In most configurations, the passive node runs only the Cluster Vault Manager to manage cluster status and failover processes, while other services like the PrivateArk Database remain inactive until failover. Therefore, the correct service running on the passive node is the Cluster Vault Manager.