CyberArk EPM-DEF Online Practice Questions and Exam Preparation

CyberArk EPM-DEF Online Questions & Answers

• Question 21:

  Which user or group will not be removed as part of CyberArk EPM's Remove Local Administrators feature?

  A. Built-in Local Administrator
  B. Domain Users
  C. Admin Users
  D. Power Users
  A. Built-in Local Administrator

  ---

  Explanation/Reference:

• Question 22:

  What are Trusted sources for Windows endpoints used for?

  A. Creating policies that contain trusted sources of applications.
  B. Defining applications that can be used by the developers.
  C. Listing all the approved application to the end users.
  D. Managing groups added by recommendation.
  C. Listing all the approved application to the end users.

• Question 23:

  A company is looking to manage their Windows Servers and Desktops with CyberArk EPM. Management would like to define different default policies between the Windows Servers and Windows Desktops.

  What should the EPM Administrator do?

  A. In the Default Policies, exclude either the Windows Servers or the Windows Desktops.
  B. Create Advanced Policies to apply different policies between Windows Servers and Windows Desktops.
  C. CyberArk does not recommend installing EPM Agents on Windows Servers.
  D. Create a separate Set for Windows Servers and Windows Desktops.
  B. Create Advanced Policies to apply different policies between Windows Servers and Windows Desktops.

• Question 24:

  When deploying Ransomware Protection, what tasks should be considered before enabling this functionality? (Choose two.)

  A. Add trusted software to the Authorized Applications (Ransomware protection) Application Group
  B. Add trusted software to the Allow Application Group
  C. Add additional files, folders, and/or file extensions to be included to Ransomware Protection
  D. Enable Detect privileged unhandled applications under Default Policies
  A. Add trusted software to the Authorized Applications (Ransomware protection) Application Group
  C. Add additional files, folders, and/or file extensions to be included to Ransomware Protection

• Question 25:

  An application has been identified by the LSASS Credentials Harvesting Module.

  What is the recommended approach to excluding the application?

  A. In Agent Configurations, add the application to the Threat Protection Exclusions
  B. Add the application to the Files to be Ignored Always in Agent Configurations.
  C. Exclude the application within the LSASS Credentials Harvesting module.
  D. Add the application to an Advanced Policy or Application Group with an Elevate policy action.
  A. In Agent Configurations, add the application to the Threat Protection Exclusions

• Question 26:

  In EPM, creation of which user type is required to use SAML?

  A. Local CyberArk EPM User
  B. AD User
  C. SQL User
  D. Azure AD User
  D. Azure AD User

• Question 27:

  What can you manage by using User Policies?

  A. Just-In-Time endpoint access and elevation, access to removable drives, and Services access.
  B. Access to Windows Services only.
  C. Filesystem and registry access, access to removable drives, and Services access.
  D. Just-In-Time endpoint access and elevation, access to removable drives, filesystem and registry access, Services access, and User account control monitoring.
  D. Just-In-Time endpoint access and elevation, access to removable drives, filesystem and registry access, Services access, and User account control monitoring.

• Question 28:

  On the Default Policies page, what are the names of policies that can be set as soon as EPM is deployed?

  A. Privilege Escalation, Privilege Management, Application Management
  B. Privilege Management, Application Control, Threat analysis
  C. Privilege Management, Threat Protection, Application Escalation Control
  D. Privilege Management, Privilege Threat Protection, Local Privileged Accounts Management
  D. Privilege Management, Privilege Threat Protection, Local Privileged Accounts Management

• Question 29:

  What is required to configure SAML authentication on EPM?

  A. OAuth token
  B. Signed Authentication Request
  C. Encrypted Assertion
  D. Signed SAML Response
  D. Signed SAML Response

• Question 30:

  When enabling Threat Protection policies, what should an EPM Administrator consider? (Choose two.)

  A. Some Threat Protection policies are applicable only for Windows Servers as opposed to Workstations.
  B. Certain Threat Protection policies apply for specific applications not found on all machines
  C. Threat Protection policies requires an additional agent to be installed.
  D. Threat Protection features are not available in all regions.
  A. Some Threat Protection policies are applicable only for Windows Servers as opposed to Workstations.
  B. Certain Threat Protection policies apply for specific applications not found on all machines