CyberArk CyberArk Certifications EPM-DEF Questions & Answers

• Question 51:

  Which EPM reporting tool provides a comprehensive view of threat detection activity?

  A. Threat Detection Dashboard

  B. Detected Threats

  C. Threat Detection Events

  D. McAfee ePO Reports

  Correct Answer: A

• Question 52:

  For Advanced Policies, what can the target operating system users be set to?

  A. Local or AD users and groups, Azure AD User, Azure AD Group

  B. AD Groups, Azure AD Groups

  C. Local or AD users and groups

  D. Local or AD users, Azure AD Users

  Correct Answer: C

• Question 53:

  Which threat intelligence source requires the suspect file to be sent externally?

  A. NSRL

  B. Palo Alto Wildfire

  C. VirusTotal

  D. CyberArk Application Risk Analysis Service (ARA)

  Correct Answer: C

• Question 54:

  What is the CyberArk recommended practice when deploying the EPM agent to non- persistent VDIs?

  A. A separate set

  B. a VDI advanced policy

  C. a separate license

  D. A separate computer group

  Correct Answer: D

• Question 55:

  Where would an EPM admin configure an application policy that depends on a script returning true for an end user's machine being connected to an open (no password protection) Wi-Fi?

  A. Advanced Policy - Application Control - Check Wi-Fi security

  B. Advanced Policy - Options: Conditional enforcement - Apply Policy according to Script execution result

  C. Default policies - Check if network access is secure

  D. Advanced Policy - Access - Specify permissions to be set for Wi-Fi network security

  Correct Answer: B

• Question 56:

  An end user is experiencing performance issues on their device after the EPM Agent had been installed on their machine. What should the EPM Administrator do first to help resolve the issue?

  A. Verify any 3rd party security solutions have been added to EPM's Files To Be Ignored Always configuration and CyberArk EPM has also been excluded from the 3rd party security solutions.

  B. Enable the Default Policy's Privilege Management Control, Unhandled Privileged Applications in Elevate mode.

  C. Rerun the agent installation on the user's machine to repair the installation.

  D. Uninstall or disable any anti-virus software prohibiting the EPM Agent functionalities.

  Correct Answer: D

• Question 57:

  An EPM Administrator is looking to enable the Threat Deception feature, under what section should the EPM Administrator go to enable this feature?

  A. Threat Protection Inbox

  B. Policies

  C. Threat Intelligence

  D. Policy Audit

  Correct Answer: B

• Question 58:

  What is a valid step to investigate an EPM agent that is unable to connect to the EPM server?

  A. On the end point, open a browser session to the URL of the EPM server.

  B. Ping the endpoint from the EPM server.

  C. Ping the server from the endpoint.

  D. Restart the end point

  Correct Answer: C

• Question 59:

  DRAG DROP

  Match the Application Groups policy to their correct description.

  Select and Place:

  

  Correct Answer:

  

• Question 60:

  DRAG DROP

  Match the Trusted Source to its correct definition:

  Select and Place:

  

  Correct Answer: