CyberArk Defender - EPM (EPM-DEF) Free Practice Test

Question 1

Which setting in the agent configuration controls how often the agent sends events to the EPM Server?

A. Condition Timeout

B. Heartbeat Timeout

C. Event Queue Flush Period

D. Policy Update Rate

Correct Answer: C

Question 2

A Helpdesk technician needs to provide remote assistance to a user whose laptop cannot connect to the Internet to pull EPM policies. What CyberArk EPM feature should the Helpdesk technician use to allow the user elevation capabilities?

A. Offline Policy Authorization Generator

B. Just In Time Access and Elevation

C. Elevate Trusted Application If Necessary

D. Loosely Connected Devices Credential Management

Correct Answer: B

Question 3

An EPM Administrator is looking to enable the Threat Deception feature, under what section should the EPM Administrator go to enable this feature?

A. Policy Audit

B. Threat Intelligence

C. Threat Protection Inbox

D. Policies

Correct Answer: D

Question 4

CyberArk EPM's Ransomware Protection comes with file types to be protected out of the box. If an EPM Administrator would like to remove a file type from Ransomware Protection, where can this be done?

A. Set Security Permissions within Advanced Policies

B. Protected Files within Agent Configurations

C. Policy Scope within Protect Against Ransomware

D. Authorized Applications (Ransomware Protection) within Application Groups

Correct Answer: B

Question 5

A particular user in company ABC requires the ability to run any application with administrative privileges every day that they log in to their systems for a total duration of 5 working days.
What is the correct solution that an EPM admin can implement?

A. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to
120 hours

B. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to
120 hours and Terminate administrative processes when the policy expires option unchecked

C. An EPM admin can create an authorization token for each application needed by running:
EPMOPAGtool.exe -command gentoken -targetUser <username> -filehash <file hash> -timeLimit 120
-action run

D. An EPM admin can create a secure token for the end user's computer and instruct the end user to open an administrative command prompt and run the command vfagent.exe -UseToken <securetoken_value>

Correct Answer: B

Question 6

What EPM component is responsible for communicating password changes in credential rotation?

A. EPM Agent

B. EPM API

C. EPM Server

D. EPM Discovery

Correct Answer: C

Question 7

An EPM Administrator would like to include a particular file extension to be monitored and protected under Ransomware Protection. What setting should the EPM Administrator configure to add the extension?

A. Default Policies

B. Anti-tampering Protection

C. Authorized Applications (Ransomware Protection)

D. Files to be Ignored Always

Correct Answer: C

Welcome to TestSimulate

CyberArk Defender - EPM (EPM-DEF) Free Practice Test