CyberArk EPM-DEF Online Practice Questions and Exam Preparation

CyberArk EPM-DEF Online Questions & Answers

• Question 1:

  What feature is designed to exclude applications from CyberArk EPM's Ransomware Protection, without whitelisting the application launch?

  A. Trusted Sources
  B. Authorized Applications (Ransomware Protection)
  C. Threat Intelligence
  D. Policy Recommendations
  B. Authorized Applications (Ransomware Protection)

• Question 2:

  When adding the EPM agent to a pre-existing security stack on workstation, what two steps are CyberArk recommendations. (Choose two.)

  A. Add any pre-existing security application to the Files to Be Ignored Always.
  B. Add EPM agent to the other security tools exclusions.
  C. EPM agent should never be run with any other security tools.
  D. Create new advanced policies for each security tool.
  A. Add any pre-existing security application to the Files to Be Ignored Always.
  B. Add EPM agent to the other security tools exclusions.

• Question 3:

  What are the policy targeting options available for a policy upon creation?

  A. AD Users and Groups, Computers in AD Security Groups, Servers
  B. Computers in this set, Computers in AD Security Groups, Users and Groups
  C. OS Computers, EPM Sets, AD Users
  D. EPM Sets, Computers in AD Security Groups, AD Users and AD Security Groups
  D. EPM Sets, Computers in AD Security Groups, AD Users and AD Security Groups

• Question 4:

  CyberArk EPM's Ransomware Protection comes with file types to be protected out of the box. If an EPM Administrator would like to remove a file type from Ransomware Protection, where can this be done?

  A. Policy Scope within Protect Against Ransomware
  B. Authorized Applications (Ransomware Protection) within Application Groups
  C. Set Security Permissions within Advanced Policies
  D. Protected Files within Agent Configurations
  D. Protected Files within Agent Configurations

• Question 5:

  How does a Trusted Source policy affect an application?

  A. Applications will be allowed to run and will only elevate if required.
  B. Applications will be allowed to run and will inherit the process token from the EPM agent.
  C. Applications will be allowed to run always in elevated mode.
  D. Application from the defined trusted sources must be configured on a per application basis, in order to define run and elevation parameters.
  D. Application from the defined trusted sources must be configured on a per application basis, in order to define run and elevation parameters.

• Question 6:

  Which policy can be used to improve endpoint performance for applications commonly used for software development?

  A. Developer Applications
  B. Trusted Application
  C. Trusted Source
  D. Software Updater
  B. Trusted Application

• Question 7:

  CyberArk's Privilege Threat Protection policies are available for which Operating Systems? (Choose two.)

  A. Windows Workstations
  B. Windows Servers
  C. MacOS
  D. Linux
  A. Windows Workstations
  B. Windows Servers

• Question 8:

  An end user is reporting that an application that needs administrative rights is crashing when selecting a certain option menu item. The Application is part of an advanced elevate policy and is working correctly except when using that menu item.

  What could be the EPM cause of the error?

  A. The Users defined in the advanced policy do not include the end user running the application.
  B. The Advanced: Time options are not set correctly to include the time that the user is running the application at.
  C. The Elevate Child Processes option is not enabled.
  D. The Specify permissions to be set for selected Services on End-user Computers is set to Allow Start/Stop
  C. The Elevate Child Processes option is not enabled.

• Question 9:

  When blocking applications, what is the recommended practice regarding the end-user UI?

  A. Show a block prompt for blocked applications.
  B. Show no prompts for blocked applications.
  C. Hide the CyberArk EPM Agent icon in the system tray.
  D. Enable the Default Deny policy.
  A. Show a block prompt for blocked applications.

• Question 10:

  For Advanced Policies, what can the target operating system users be set to?

  A. Local or AD users and groups, Azure AD User, Azure AD Group
  B. AD Groups, Azure AD Groups
  C. Local or AD users and groups
  D. Local or AD users, Azure AD Users
  C. Local or AD users and groups