CyberArk CyberArk Certifications EPM-DEF Questions & Answers

• Question 11:

  What are Trusted sources for Windows endpoints used for?

  A. Creating policies that contain trusted sources of applications.

  B. Defining applications that can be used by the developers.

  C. Listing all the approved application to the end users.

  D. Managing groups added by recommendation.

  Correct Answer: C

• Question 12:

  Which policy can be used to improve endpoint performance for applications commonly used for software development?

  A. Developer Applications

  B. Trusted Application

  C. Trusted Source

  D. Software Updater

  Correct Answer: B

• Question 13:

  On the Default Policies page, what are the names of policies that can be set as soon as EPM is deployed?

  A. Privilege Escalation, Privilege Management, Application Management

  B. Privilege Management, Application Control, Threat analysis

  C. Privilege Management, Threat Protection, Application Escalation Control

  D. Privilege Management, Privilege Threat Protection, Local Privileged Accounts Management

  Correct Answer: D

• Question 14:

  What unauthorized change can CyberArk EPM Ransomware Protection prevent?

  A. Windows Registry Keys

  B. Website Data

  C. Local Administrator Passwords

  D. Certificates in the Certificate Store

  Correct Answer: D

• Question 15:

  What feature is designed to exclude applications from CyberArk EPM's Ransomware Protection, without whitelisting the application launch?

  A. Trusted Sources

  B. Authorized Applications (Ransomware Protection)

  C. Threat Intelligence

  D. Policy Recommendations

  Correct Answer: B

• Question 16:

  In EPM, creation of which user type is required to use SAML?

  A. Local CyberArk EPM User

  B. AD User

  C. SQL User

  D. Azure AD User

  Correct Answer: D

• Question 17:

  CyberArk's Privilege Threat Protection policies are available for which Operating Systems? (Choose two.)

  A. Windows Workstations

  B. Windows Servers

  C. MacOS

  D. Linux

  Correct Answer: AB

• Question 18:

  A company is looking to manage their Windows Servers and Desktops with CyberArk EPM. Management would like to define different default policies between the Windows Servers and Windows Desktops.

  What should the EPM Administrator do?

  A. In the Default Policies, exclude either the Windows Servers or the Windows Desktops.

  B. Create Advanced Policies to apply different policies between Windows Servers and Windows Desktops.

  C. CyberArk does not recommend installing EPM Agents on Windows Servers.

  D. Create a separate Set for Windows Servers and Windows Desktops.

  Correct Answer: B

• Question 19:

  When working with credential rotation/loosely connected devices, what additional CyberArk components are required?

  A. PTA

  B. OPM

  C. PVWA

  D. DAP

  Correct Answer: C

• Question 20:

  An EPM Administrator would like to exclude an application from all Threat Protection modules. Where should the EPM Administrator make this change?

  A. Privilege Threat Protection under Policies.

  B. Authorized Applications under Application Groups.

  C. Protect Against Ransomware under Default Policies.

  D. Threat Protection under Agent Configurations.

  Correct Answer: B