CyberArk EPM-DEF Online Practice Questions and Exam Preparation

CyberArk EPM-DEF Online Questions & Answers

• Question 11:

  A policy needs to be created to block particular applications for a specific user group. Based on CyberArk's policy naming best practices, what should be included in the policy's name?

  A. Policy creation date
  B. Target use group
  C. Creator of the policy
  D. The policy's Set name
  B. Target use group

• Question 12:

  If you want to diagnose agent EPM agent connectivity issues, what is the agent executable that can be used from the command line?

  A. vf_agent.exe
  B. epm_agent.exe
  C. vault_agent.exe
  D. db_agent.exe
  B. epm_agent.exe

• Question 13:

  An EPM Administrator would like to include a particular file extension to be monitored and protected under Ransomware Protection. What setting should the EPM Administrator configure to add the extension?

  A. Authorized Applications (Ransomware Protection)
  B. Files to be Ignored Always
  C. Anti-tampering Protection
  D. Default Policies
  A. Authorized Applications (Ransomware Protection)

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM/Latest/en/Content/EPM/Server%20User%20Guide/PrivMgmnt- Ransomware-NewUI.htm

• Question 14:

  A Helpdesk technician needs to provide remote assistance to a user whose laptop cannot connect to the Internet to pull EPM policies. What CyberArk EPM feature should the Helpdesk technician use to allow the user elevation capabilities?

  A. Offline Policy Authorization Generator
  B. Elevate Trusted Application If Necessary
  C. Just In Time Access and Elevation
  D. Loosely Connected Devices Credential Management
  C. Just In Time Access and Elevation

• Question 15:

  Which programming interface enables you to perform activities on EPM objects via a REST Web Service?

  A. EPM Web Services SDK
  B. Application Password SDK
  C. Mac Credential Provider SDK
  D. Java password SDK
  A. EPM Web Services SDK

• Question 16:

  What is a valid step to investigate an EPM agent that is unable to connect to the EPM server?

  A. On the end point, open a browser session to the URL of the EPM server.
  B. Ping the endpoint from the EPM server.
  C. Ping the server from the endpoint.
  D. Restart the end point
  C. Ping the server from the endpoint.

• Question 17:

  Which of the following is CyberArk's Recommended FIRST roll out strategy?

  A. Implement Application Control
  B. Implement Privilege Management
  C. Implement Threat Detection
  D. Implement Ransomware Protection
  B. Implement Privilege Management

  ---

  Explanation/Reference:

  Reference: https://hkrtrainings.com/what-is-cyberark

• Question 18:

  Which threat intelligence source requires the suspect file to be sent externally?

  A. NSRL
  B. Palo Alto Wildfire
  C. VirusTotal
  D. CyberArk Application Risk Analysis Service (ARA)
  C. VirusTotal

• Question 19:

  When working with credential rotation at the EPM level, what is the minimum time period that can be set between connections?

  A. 1 hour
  B. 5 hours
  C. 24 hours
  D. 72 hours
  D. 72 hours

• Question 20:

  Which setting in the agent configuration controls how often the agent sends events to the EPM Server?

  A. Event Queue Flush Period
  B. Heartbeat Timeout
  C. Condition Timeout
  D. Policy Update Rate
  A. Event Queue Flush Period