CyberArk EPM-DEF Online Practice Questions and Exam Preparation

CyberArk EPM-DEF Online Questions & Answers

• Question 31:

  If Privilege Management is not working on an endpoint, what is the most likely cause that can be verified in the EPM Agent Log Files?

  A. Behavior of the elevation prompt for administrators in Admin Approval Mode is set to "Prompt for Consent for non-Windows binaries".
  B. Agent version is incompatible.
  C. UAC policy Admin Approval for the Built-in Administrator Account is set to "Disabled".
  D. UAC policy Run all administrators in Admin Approval Mode is set to "Enabled".
  D. UAC policy Run all administrators in Admin Approval Mode is set to "Enabled".

• Question 32:

  An EPM Administrator would like to enable a Threat Protection policy, however, the policy protects an application that is not installed on all endpoints.

  What should the EPM Administrator do?

  A. Enable the Threat Protection policy and configure the Policy Targets.
  B. Do not enable the Threat Protection policy.
  C. Enable the Threat Protection policy only in Detect mode.
  D. Split up the endpoints in to separate Sets and enable Threat Protection for only one of the Sets.
  D. Split up the endpoints in to separate Sets and enable Threat Protection for only one of the Sets.

• Question 33:

  How does CyberArk EPM's Ransomware Protection feature monitor for Ransomware Attacks?

  A. It compares known ransomware signatures retrieved from virus databases.
  B. It sandboxes the suspected ransomware and applies heuristics.
  C. It monitors for any unauthorized access to specified files.
  D. It performs a lookup of file signatures against VirusTotal's database.
  B. It sandboxes the suspected ransomware and applies heuristics.

• Question 34:

  An EPM Administrator would like to notify end users whenever the Elevate policy is granting users elevation for their applications. Where should the EPM Administrator go to enable the end-user dialog?

  A. End-user UI in the left panel of the console
  B. Advanced, Agent Configurations
  C. Default Policies
  D. End-User UI within the policy
  D. End-User UI within the policy

  ---

  Explanation/Reference:

• Question 35:

  After a clean installation of the EPM agent, the local administrator password is not being changed on macOS and the old password can still be used to log in.

  What is a possible cause?

  A. Secure Token on macOS endpoint is not enabled.
  B. EPM agent is not able to connect to the EPM server.
  C. After installation, Full Disk Access for the macOS agent to support EPM policies was not approved.
  D. Endpoint password policy is too restrictive.
  A. Secure Token on macOS endpoint is not enabled.

• Question 36:

  An EPM Administrator would like to exclude an application from all Threat Protection modules. Where should the EPM Administrator make this change?

  A. Privilege Threat Protection under Policies.
  B. Authorized Applications under Application Groups.
  C. Protect Against Ransomware under Default Policies.
  D. Threat Protection under Agent Configurations.
  B. Authorized Applications under Application Groups.

• Question 37:

  DRAG DROP

  Match the Trusted Source to its correct definition:

  Select and Place:

  

  Explanation/Reference:

  ---

  

• Question 38:

  When working with credential rotation/loosely connected devices, what additional CyberArk components are required?

  A. PTA
  B. OPM
  C. PVWA
  D. DAP
  C. PVWA

  ---

  Explanation/Reference:

• Question 39:

  An EPM Administrator would like to enable CyberArk EPM's Ransomware Protection in Restrict mode. What should the EPM Administrator do?

  A. Set Block unhandled applications to On.
  B. Set Protect Against Ransomware to Restrict.
  C. Set Protect Against Ransomware to Restrict and Set Block unhandled applications to On.
  D. Set Control unhandled applications to Detect.
  C. Set Protect Against Ransomware to Restrict and Set Block unhandled applications to On.

• Question 40:

  An EPM Administrator needs to create a policy to allow the MacOS developers elevation to an application. What type of policy should be used?

  A. Elevate Application Group
  B. Developer Applications Application Group
  C. Elevate Trusted Applications If Necessary Advanced Policy
  D. Elevate MacOS Policy
  C. Elevate Trusted Applications If Necessary Advanced Policy