[May-2023] EPM-DEF Questions – Truly Beneficial For Your CyberArk Exam [Q11-Q32]

5/5 - (1 vote)

[May-2023] EPM-DEF Questions – Truly Beneficial For Your CyberArk Exam

Download CyberArk EPM-DEF Sample Questions

NO.11 An EPM Administrator would like to include a particular file extension to be monitored and protected under Ransomware Protection. What setting should the EPM Administrator configure to add the extension?

Authorized Applications (Ransomware Protection)

Files to be Ignored Always

Anti-tampering Protection

Default Policies

NO.12 On the Default Policies page, what are the names of policies that can be set as soon as EPM is deployed?

Privilege Escalation, Privilege Management, Application Management

Privilege Management, Application Control, Threat analysis

Privilege Management, Threat Protection, Application Escalation Control

Privilege Management, Privilege Threat Protection, Local Privileged Accounts Management

NO.13 A policy needs to be created to block particular applications for a specific user group. Based on CyberArk’s policy naming best practices, what should be included in the policy’s name?

Policy creation date

Target use group

Creator of the policy

The policy’s Set name

NO.14 How does EPM help streamline security compliance and reporting?

Use of automated distribution of reports to the security team

Provides reports in standard formats such as PDF, Word and Excel

Print reports

Create custom reports

NO.15 Match the Application Groups policy to their correct description.

NO.16 A particular user in company ABC requires the ability to run any application with administrative privileges every day that they log in to their systems for a total duration of 5 working days.
What is the correct solution that an EPM admin can implement?

An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to
120 hours

An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to
120 hours and Terminate administrative processes when the policy expires option unchecked

An EPM admin can create an authorization token for each application needed by running:
EPMOPAGtool.exe -command gentoken -targetUser <username> -filehash <file hash> -timeLimit 120
-action run

An EPM admin can create a secure token for the end user’s computer and instruct the end user to open an administrative command prompt and run the command vfagent.exe -UseToken <securetoken_value>

NO.17 A company is looking to manage their Windows Servers and Desktops with CyberArk EPM. Management would like to define different default policies between the Windows Servers and Windows Desktops.
What should the EPM Administrator do?

In the Default Policies, exclude either the Windows Servers or the Windows Desktops.

Create Advanced Policies to apply different policies between Windows Servers and Windows Desktops.

CyberArk does not recommend installing EPM Agents on Windows Servers.

Create a separate Set for Windows Servers and Windows Desktops.

NO.18 What is required to configure SAML authentication on EPM?

OAuth token

Signed Authentication Request

Encrypted Assertion

Signed SAML Response

NO.19 An application has been identified by the LSASS Credentials Harvesting Module.
What is the recommended approach to excluding the application?

In Agent Configurations, add the application to the Threat Protection Exclusions

Add the application to the Files to be Ignored Always in Agent Configurations.

Exclude the application within the LSASS Credentials Harvesting module.

Add the application to an Advanced Policy or Application Group with an Elevate policy action.

NO.20 An EPM Administrator is looking to enable the Threat Deception feature, under what section should the EPM Administrator go to enable this feature?

Threat Protection Inbox

Policies

Threat Intelligence

Policy Audit

NO.21 Which of the following application options can be used when defining trusted sources?

Publisher, Product, Size, URL

Publisher, Name, Size, URI

Product, URL, Machine, Package

Product, Publisher, User/Group, Installation Package

NO.22 When enabling Threat Protection policies, what should an EPM Administrator consider? (Choose two.)

Some Threat Protection policies are applicable only for Windows Servers as opposed to Workstations.

Certain Threat Protection policies apply for specific applications not found on all machines

Threat Protection policies requires an additional agent to be installed.

Threat Protection features are not available in all regions.

NO.23 What is a valid step to investigate an EPM agent that is unable to connect to the EPM server?

On the end point, open a browser session to the URL of the EPM server.

Ping the endpoint from the EPM server.

Ping the server from the endpoint.

Restart the end point

NO.24 What is the CyberArk recommended practice when deploying the EPM agent to non-persistent VDIs?

A separate set

a VDI advanced policy

a separate license

A separate computer group

NO.25 An EPM Administrator would like to notify end users whenever the Elevate policy is granting users elevation for their applications. Where should the EPM Administrator go to enable the end-user dialog?

End-user UI in the left panel of the console

Advanced, Agent Configurations

Default Policies

End-User UI within the policy

NO.26 Which user or group will not be removed as part of CyberArk EPM’s Remove Local Administrators feature?

Built-in Local Administrator

Domain Users

Admin Users

Power Users

NO.27 Match the Trusted Source to its correct definition:

NO.28 A Helpdesk technician needs to provide remote assistance to a user whose laptop cannot connect to the Internet to pull EPM policies. What CyberArk EPM feature should the Helpdesk technician use to allow the user elevation capabilities?

Offline Policy Authorization Generator

Elevate Trusted Application If Necessary

Just In Time Access and Elevation

Loosely Connected Devices Credential Management

NO.29 When adding the EPM agent to a pre-existing security stack on workstation, what two steps are CyberArk recommendations. (Choose two.)

Add any pre-existing security application to the Files to Be Ignored Always.

Add EPM agent to the other security tools exclusions.

EPM agent should never be run with any other security tools.

Create new advanced policies for each security tool.

NO.30 What are valid policy options for JIT and elevation policies?

Grant temporary access for all users, Policy name, Restart administrative processes in admin approval mode, Collect audit information

Grant temporary access for, Policy name, Terminate administrative processes when the policy expires, Collect audit information

Grant administrative access, Policy name, Log off to apply policy, Collect policy violation information

Terminate administrative services, Grant policy access for, Policy name, Collect audit reports

NO.31 For Advanced Policies, what can the target operating system users be set to?

Local or AD users and groups, Azure AD User, Azure AD Group

AD Groups, Azure AD Groups

Local or AD users and groups

Local or AD users, Azure AD Users

NO.32 Where would an EPM admin configure an application policy that depends on a script returning true for an end user’s machine being connected to an open (no password protection) Wi-Fi?

Advanced Policy – Application Control – Check Wi-Fi security

Advanced Policy – Options: Conditional enforcement – Apply Policy according to Script execution result

Default policies – Check if network access is secure

Advanced Policy – Access – Specify permissions to be set for Wi-Fi network security

Truly Beneficial For Your CyberArk Exam: https://www.dumpstests.com/EPM-DEF-latest-test-dumps.html

[May-2023] EPM-DEF Questions – Truly Beneficial For Your CyberArk Exam [Q11-Q32]

No Responses

Leave a Reply Cancel reply

Related Certifications

EPM-DEF Practice Tests

Recent Posts

Recent Comments

Categories