EPM-DEF Questions - Truly Beneficial For Your CyberArk Exam (Updated 62 Questions)
View All EPM-DEF Actual Exam Questions, Answers and Explanations for Free
CyberArk Defender - EPM (Endpoint Privilege Manager) exam is a certification program that validates the skills and knowledge of cybersecurity professionals in implementing and managing CyberArk Endpoint Privilege Manager. CyberArk EPM is a solution designed to protect endpoints from cyber attacks by preventing unauthorized access to privileged accounts and credentials. The EPM-DEF exam is aimed at individuals who are responsible for implementing and managing CyberArk EPM in their organizations.
NEW QUESTION # 26
When deploying Ransomware Protection, what tasks should be considered before enabling this functionality?
(Choose two.)
- A. Add additional files, folders, and/or file extensions to be included to Ransomware Protection
- B. Add trusted software to the Allow Application Group
- C. Enable Detect privileged unhandled applications under Default Policies
- D. Add trusted software to the Authorized Applications (Ransomware protection) Application Group
Answer: A,D
NEW QUESTION # 27
Which EPM reporting tool provides a comprehensive view of threat detection activity?
- A. Threat Detection Dashboard
- B. McAfee ePO Reports
- C. Threat Detection Events
- D. Detected Threats
Answer: A
NEW QUESTION # 28
An EPM Administrator is looking to enable the Threat Deception feature, under what section should the EPM Administrator go to enable this feature?
- A. Policy Audit
- B. Threat Protection Inbox
- C. Threat Intelligence
- D. Policies
Answer: D
NEW QUESTION # 29
Match the Trusted Source to its correct definition:
Answer:
Explanation:
NEW QUESTION # 30
For Advanced Policies, what can the target operating system users be set to?
- A. Local or AD users and groups
- B. AD Groups, Azure AD Groups
- C. Local or AD users, Azure AD Users
- D. Local or AD users and groups, Azure AD User, Azure AD Group
Answer: A
NEW QUESTION # 31
An EPM Administrator would like to include a particular file extension to be monitored and protected under Ransomware Protection. What setting should the EPM Administrator configure to add the extension?
- A. Default Policies
- B. Files to be Ignored Always
- C. Anti-tampering Protection
- D. Authorized Applications (Ransomware Protection)
Answer: D
NEW QUESTION # 32
Where can you view CyberArk EPM Credential Lures events?
- A. Threat Protection Inbox
- B. Policy Audit
- C. Events Management
- D. Application Catalog
Answer: A
NEW QUESTION # 33
Where would an EPM admin configure an application policy that depends on a script returning true for an end user's machine being connected to an open (no password protection) Wi-Fi?
- A. Advanced Policy - Options: Conditional enforcement - Apply Policy according to Script execution result
- B. Advanced Policy - Application Control - Check Wi-Fi security
- C. Advanced Policy - Access - Specify permissions to be set for Wi-Fi network security
- D. Default policies - Check if network access is secure
Answer: A
NEW QUESTION # 34
Which of the following is CyberArk's Recommended FIRST roll out strategy?
- A. Implement Threat Detection
- B. Implement Privilege Management
- C. Implement Application Control
- D. Implement Ransomware Protection
Answer: B
NEW QUESTION # 35
An EPM Administrator would like to notify end users whenever the Elevate policy is granting users elevation for their applications. Where should the EPM Administrator go to enable the end-user dialog?
- A. End-user UI in the left panel of the console
- B. Default Policies
- C. Advanced, Agent Configurations
- D. End-User UI within the policy
Answer: D
NEW QUESTION # 36
What can you manage by using User Policies?
- A. Just-In-Time endpoint access and elevation, access to removable drives, filesystem and registry access, Services access, and User account control monitoring.
- B. Access to Windows Services only.
- C. Just-In-Time endpoint access and elevation, access to removable drives, and Services access.
- D. Filesystem and registry access, access to removable drives, and Services access.
Answer: A
NEW QUESTION # 37
On the Default Policies page, what are the names of policies that can be set as soon as EPM is deployed?
- A. Privilege Escalation, Privilege Management, Application Management
- B. Privilege Management, Privilege Threat Protection, Local Privileged Accounts Management
- C. Privilege Management, Threat Protection, Application Escalation Control
- D. Privilege Management, Application Control, Threat analysis
Answer: B
NEW QUESTION # 38
Before enabling Ransomware Protection, what should the EPM Administrator do first?
- A. Enable the Privilege Management Inbox in Elevate mode.
- B. Enable Threat Protection and Threat Intelligence modules.
- C. Enable the Control Applications Downloaded From The Internet feature in Restrict mode.
- D. Review the Authorized Applications (Ransomware Protection) group and update if necessary.
Answer: D
NEW QUESTION # 39
What EPM component is responsible for communicating password changes in credential rotation?
- A. EPM API
- B. EPM Agent
- C. EPM Discovery
- D. EPM Server
Answer: D
NEW QUESTION # 40
When adding the EPM agent to a pre-existing security stack on workstation, what two steps are CyberArk recommendations. (Choose two.)
- A. Add any pre-existing security application to the Files to Be Ignored Always.
- B. EPM agent should never be run with any other security tools.
- C. Create new advanced policies for each security tool.
- D. Add EPM agent to the other security tools exclusions.
Answer: A,D
NEW QUESTION # 41
An end user is reporting that an application that needs administrative rights is crashing when selecting a certain option menu item. The Application is part of an advanced elevate policy and is working correctly except when using that menu item.
What could be the EPM cause of the error?
- A. The Users defined in the advanced policy do not include the end user running the application.
- B. The Specify permissions to be set for selected Services on End-user Computers is set to Allow Start/Stop
- C. The Advanced: Time options are not set correctly to include the time that the user is running the application at.
- D. The Elevate Child Processes option is not enabled.
Answer: D
NEW QUESTION # 42
Can the EPM Set Administrator configure Audit Dialog Pop-ups for the Record Audit Video option?
- A. Yes, when Audit Video recording started, when Audit Video recording is uploaded to the EPM server, and when audit recording cannot be initialized.
- B. Yes, when Audit Video recording started, when Audit Video recording stopped, and when Audit Recording video reached size limit.
- C. Yes, when Audit Video recording started, when not enough disk space to start the video recording, and when video recording is initializing.
- D. No, Audit Video is only available without the possibility of having End-User dialog pop-ups.
Answer: D
NEW QUESTION # 43
A particular user in company ABC requires the ability to run any application with administrative privileges every day that they log in to their systems for a total duration of 5 working days.
What is the correct solution that an EPM admin can implement?
- A. An EPM admin can create a secure token for the end user's computer and instruct the end user to open an administrative command prompt and run the command vfagent.exe -UseToken <securetoken_value>
- B. An EPM admin can create an authorization token for each application needed by running:
EPMOPAGtool.exe -command gentoken -targetUser <username> -filehash <file hash> -timeLimit 120
-action run - C. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to
120 hours and Terminate administrative processes when the policy expires option unchecked - D. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to
120 hours
Answer: C
NEW QUESTION # 44
When working with credential rotation at the EPM level, what is the minimum time period that can be set between connections?
- A. 72 hours
- B. 24 hours
- C. 5 hours
- D. 1 hour
Answer: A
NEW QUESTION # 45
An EPM Administrator would like to enable a Threat Protection policy, however, the policy protects an application that is not installed on all endpoints.
What should the EPM Administrator do?
- A. Do not enable the Threat Protection policy.
- B. Enable the Threat Protection policy and configure the Policy Targets.
- C. Split up the endpoints in to separate Sets and enable Threat Protection for only one of the Sets.
- D. Enable the Threat Protection policy only in Detect mode.
Answer: C
NEW QUESTION # 46
CyberArk's Privilege Threat Protection policies are available for which Operating Systems? (Choose two.)
- A. Linux
- B. Windows Servers
- C. Windows Workstations
- D. MacOS
Answer: B,C
NEW QUESTION # 47
Which programming interface enables you to perform activities on EPM objects via a REST Web Service?
- A. Mac Credential Provider SDK
- B. EPM Web Services SDK
- C. Application Password SDK
- D. Java password SDK
Answer: B
NEW QUESTION # 48
......
EPM-DEF dumps Free Test Engine Verified By It Certified Experts: https://www.testsimulate.com/EPM-DEF-study-materials.html