CyberArk EPM-DEF Online Practice Questions and Exam Preparation

CyberArk EPM-DEF Online Questions & Answers

• Question 41:

  What type of user can be created from the Threat Deception LSASS Credential Lures feature?

  A. It does not create any users
  B. A standard user
  C. A local administrator user
  D. A domain admin user
  B. A standard user

• Question 42:

  Where can you view CyberArk EPM Credential Lures events?

  A. Application Catalog
  B. Threat Protection Inbox
  C. Events Management
  D. Policy Audit
  B. Threat Protection Inbox

  ---

  Explanation/Reference:

• Question 43:

  When deploying EPM and in the Privilege Management phase what is the purpose of Discovery?

  A. To identify all non-administrative events
  B. To identify all administrative level events
  C. To identify both administrative and non-administrative level events
  D. To identify non-administrative threats
  C. To identify both administrative and non-administrative level events

• Question 44:

  How does EPM help streamline security compliance and reporting?

  A. Use of automated distribution of reports to the security team
  B. Provides reports in standard formats such as PDF, Word and Excel
  C. Print reports
  D. Create custom reports
  B. Provides reports in standard formats such as PDF, Word and Excel

• Question 45:

  A particular user in company ABC requires the ability to run any application with administrative privileges every day that they log in to their systems for a total duration of 5 working days.

  What is the correct solution that an EPM admin can implement?

  A. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to 120 hours
  B. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to 120 hours and Terminate administrative processes when the policy expires option unchecked
  C. An EPM admin can create an authorization token for each application needed by running: EPMOPAGtool.exe -command gentoken -targetUser -filehash -timeLimit 120 -action run
  D. An EPM admin can create a secure token for the end user's computer and instruct the end user to open an administrative command prompt and run the command vfagent.exe - UseToken
  B. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to 120 hours and Terminate administrative processes when the policy expires option unchecked

• Question 46:

  Where would an EPM admin configure an application policy that depends on a script returning true for an end user's machine being connected to an open (no password protection) Wi-Fi?

  A. Advanced Policy - Application Control - Check Wi-Fi security
  B. Advanced Policy - Options: Conditional enforcement - Apply Policy according to Script execution result
  C. Default policies - Check if network access is secure
  D. Advanced Policy - Access - Specify permissions to be set for Wi-Fi network security
  B. Advanced Policy - Options: Conditional enforcement - Apply Policy according to Script execution result

• Question 47:

  Can the EPM Set Administrator configure Audit Dialog Pop-ups for the Record Audit Video option?

  A. Yes, when Audit Video recording started, when Audit Video recording stopped, and when Audit Recording video reached size limit.
  B. Yes, when Audit Video recording started, when not enough disk space to start the video recording, and when video recording is initializing.
  C. Yes, when Audit Video recording started, when Audit Video recording is uploaded to the EPM server, and when audit recording cannot be initialized.
  D. No, Audit Video is only available without the possibility of having End-User dialog pop- ups.
  D. No, Audit Video is only available without the possibility of having End-User dialog pop- ups.

• Question 48:

  Which of the following application options can be used when defining trusted sources?

  A. Publisher, Product, Size, URL
  B. Publisher, Name, Size, URI
  C. Product, URL, Machine, Package
  D. Product, Publisher, User/Group, Installation Package
  D. Product, Publisher, User/Group, Installation Package

• Question 49:

  DRAG DROP

  Match the Application Groups policy to their correct description.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 50:

  Select the default threat intelligence source that requires additional licensing.

  A. VirusTotal
  B. Palo Alto WildFire
  C. CyberArk Application Risk Analysis Service
  D. NSRL
  B. Palo Alto WildFire