CyberArk EPM-DEF Online Practice Questions and Exam Preparation

CyberArk EPM-DEF Online Questions & Answers

• Question 51:

  An end user is experiencing performance issues on their device after the EPM Agent had been installed on their machine. What should the EPM Administrator do first to help resolve the issue?

  A. Verify any 3rd party security solutions have been added to EPM's Files To Be Ignored Always configuration and CyberArk EPM has also been excluded from the 3rd party security solutions.
  B. Enable the Default Policy's Privilege Management Control, Unhandled Privileged Applications in Elevate mode.
  C. Rerun the agent installation on the user's machine to repair the installation.
  D. Uninstall or disable any anti-virus software prohibiting the EPM Agent functionalities.
  D. Uninstall or disable any anti-virus software prohibiting the EPM Agent functionalities.

• Question 52:

  What unauthorized change can CyberArk EPM Ransomware Protection prevent?

  A. Windows Registry Keys
  B. Website Data
  C. Local Administrator Passwords
  D. Certificates in the Certificate Store
  D. Certificates in the Certificate Store

• Question 53:

  What are valid policy options for JIT and elevation policies?

  A. Grant temporary access for all users, Policy name, Restart administrative processes in admin approval mode, Collect audit information
  B. Grant temporary access for, Policy name, Terminate administrative processes when the policy expires, Collect audit information
  C. Grant administrative access, Policy name, Log off to apply policy, Collect policy violation information
  D. Terminate administrative services, Grant policy access for, Policy name, Collect audit reports
  C. Grant administrative access, Policy name, Log off to apply policy, Collect policy violation information

• Question 54:

  What are the predefined application groups?

  A. Developer group, Administrator group
  B. Run as Administrator, Run as Developer, Block
  C. Elevate, Allow, Block, Developer Applications
  D. Block Only
  C. Elevate, Allow, Block, Developer Applications

• Question 55:

  Which EPM reporting tool provides a comprehensive view of threat detection activity?

  A. Threat Detection Dashboard
  B. Detected Threats
  C. Threat Detection Events
  D. McAfee ePO Reports
  A. Threat Detection Dashboard

  ---

  Explanation/Reference:

• Question 56:

  What is the CyberArk recommended practice when deploying the EPM agent to non- persistent VDIs?

  A. A separate set
  B. a VDI advanced policy
  C. a separate license
  D. A separate computer group
  D. A separate computer group

• Question 57:

  For the CyberArk EPM Threat Deception Credential Lure feature, what is the recommendation regarding the username creation?

  A. The username should match to an existing account.
  B. The username should have a strong password associated.
  C. The username should not match to an existing account.
  D. The username should match the built-in local Administrator.
  C. The username should not match to an existing account.

• Question 58:

  An EPM Administrator is looking to enable the Threat Deception feature, under what section should the EPM Administrator go to enable this feature?

  A. Threat Protection Inbox
  B. Policies
  C. Threat Intelligence
  D. Policy Audit
  B. Policies

• Question 59:

  What EPM component is responsible for communicating password changes in credential rotation?

  A. EPM Agent
  B. EPM Server
  C. EPM API
  D. EPM Discovery
  B. EPM Server

  ---

  Explanation/Reference:

  Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM/Latest/en/Content/Policies/CredentialsRotation-NewUI.htm

• Question 60:

  Before enabling Ransomware Protection, what should the EPM Administrator do first?

  A. Enable the Privilege Management Inbox in Elevate mode.
  B. Enable the Control Applications Downloaded From The Internet feature in Restrict mode.
  C. Review the Authorized Applications (Ransomware Protection) group and update if necessary.
  D. Enable Threat Protection and Threat Intelligence modules.
  C. Review the Authorized Applications (Ransomware Protection) group and update if necessary.