PDF Download Free of EPM-DEF Valid Practice Test Questions
EPM-DEF Test Engine files, EPM-DEF Dumps PDF
CyberArk EPM-DEF (CyberArk Defender - Endpoint Privilege Manager) Certification Exam is designed to test the knowledge and skills of cybersecurity professionals in the area of endpoint privilege management. EPM-DEF exam is conducted by CyberArk, a global leader in privileged access security solutions. Endpoint privilege management is an essential aspect of cybersecurity, as it helps prevent cyber attacks by controlling access to privileged accounts and reducing the risk of insider threats.
NEW QUESTION # 25
Match the Trusted Source to its correct definition:
Answer:
Explanation:
NEW QUESTION # 26
An EPM Administrator would like to enable CyberArk EPM's Ransomware Protection in Restrict mode. What should the EPM Administrator do?
- A. Set Protect Against Ransomware to Restrict and Set Block unhandled applications to On.
- B. Set Block unhandled applications to On.
- C. Set Protect Against Ransomware to Restrict.
- D. Set Control unhandled applications to Detect.
Answer: A
NEW QUESTION # 27
When adding the EPM agent to a pre-existing security stack on workstation, what two steps are CyberArk recommendations. (Choose two.)
- A. Add any pre-existing security application to the Files to Be Ignored Always.
- B. Create new advanced policies for each security tool.
- C. Add EPM agent to the other security tools exclusions.
- D. EPM agent should never be run with any other security tools.
Answer: A,C
NEW QUESTION # 28
When deploying EPM and in the Privilege Management phase what is the purpose of Discovery?
- A. To identify both administrative and non-administrative level events
- B. To identify all non-administrative events
- C. To identify non-administrative threats
- D. To identify all administrative level events
Answer: A
NEW QUESTION # 29
An end user is reporting that an application that needs administrative rights is crashing when selecting a certain option menu item. The Application is part of an advanced elevate policy and is working correctly except when using that menu item.
What could be the EPM cause of the error?
- A. The Elevate Child Processes option is not enabled.
- B. The Specify permissions to be set for selected Services on End-user Computers is set to Allow Start/Stop
- C. The Users defined in the advanced policy do not include the end user running the application.
- D. The Advanced: Time options are not set correctly to include the time that the user is running the application at.
Answer: A
NEW QUESTION # 30
What type of user can be created from the Threat Deception LSASS Credential Lures feature?
- A. A domain admin user
- B. It does not create any users
- C. A standard user
- D. A local administrator user
Answer: C
NEW QUESTION # 31
An EPM Administrator needs to create a policy to allow the MacOS developers elevation to an application.
What type of policy should be used?
- A. Developer Applications Application Group
- B. Elevate MacOS Policy
- C. Elevate Application Group
- D. Elevate Trusted Applications If Necessary Advanced Policy
Answer: D
NEW QUESTION # 32
A particular user in company ABC requires the ability to run any application with administrative privileges every day that they log in to their systems for a total duration of 5 working days.
What is the correct solution that an EPM admin can implement?
- A. An EPM admin can create an authorization token for each application needed by running:
EPMOPAGtool.exe -command gentoken -targetUser <username> -filehash <file hash> -timeLimit 120
-action run - B. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to
120 hours and Terminate administrative processes when the policy expires option unchecked - C. An EPM admin can create a secure token for the end user's computer and instruct the end user to open an administrative command prompt and run the command vfagent.exe -UseToken <securetoken_value>
- D. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to
120 hours
Answer: B
NEW QUESTION # 33
CyberArk's Privilege Threat Protection policies are available for which Operating Systems? (Choose two.)
- A. Linux
- B. Windows Servers
- C. MacOS
- D. Windows Workstations
Answer: B,D
NEW QUESTION # 34
An EPM Administrator would like to notify end users whenever the Elevate policy is granting users elevation for their applications. Where should the EPM Administrator go to enable the end-user dialog?
- A. End-user UI in the left panel of the console
- B. End-User UI within the policy
- C. Advanced, Agent Configurations
- D. Default Policies
Answer: B
NEW QUESTION # 35
After a clean installation of the EPM agent, the local administrator password is not being changed on macOS and the old password can still be used to log in.
What is a possible cause?
- A. Secure Token on macOS endpoint is not enabled.
- B. EPM agent is not able to connect to the EPM server.
- C. Endpoint password policy is too restrictive.
- D. After installation, Full Disk Access for the macOS agent to support EPM policies was not approved.
Answer: A
NEW QUESTION # 36
What is a valid step to investigate an EPM agent that is unable to connect to the EPM server?
- A. On the end point, open a browser session to the URL of the EPM server.
- B. Restart the end point
- C. Ping the server from the endpoint.
- D. Ping the endpoint from the EPM server.
Answer: C
NEW QUESTION # 37
An end user is experiencing performance issues on their device after the EPM Agent had been installed on their machine. What should the EPM Administrator do first to help resolve the issue?
- A. Verify any 3rd party security solutions have been added to EPM's Files To Be Ignored Always configuration and CyberArk EPM has also been excluded from the 3rd party security solutions.
- B. Rerun the agent installation on the user's machine to repair the installation.
- C. Uninstall or disable any anti-virus software prohibiting the EPM Agent functionalities.
- D. Enable the Default Policy's Privilege Management Control, Unhandled Privileged Applications in Elevate mode.
Answer: C
NEW QUESTION # 38
A company is looking to manage their Windows Servers and Desktops with CyberArk EPM. Management would like to define different default policies between the Windows Servers and Windows Desktops.
What should the EPM Administrator do?
- A. Create a separate Set for Windows Servers and Windows Desktops.
- B. Create Advanced Policies to apply different policies between Windows Servers and Windows Desktops.
- C. CyberArk does not recommend installing EPM Agents on Windows Servers.
- D. In the Default Policies, exclude either the Windows Servers or the Windows Desktops.
Answer: B
NEW QUESTION # 39
An EPM Administrator would like to include a particular file extension to be monitored and protected under Ransomware Protection. What setting should the EPM Administrator configure to add the extension?
- A. Anti-tampering Protection
- B. Files to be Ignored Always
- C. Default Policies
- D. Authorized Applications (Ransomware Protection)
Answer: D
NEW QUESTION # 40
If Privilege Management is not working on an endpoint, what is the most likely cause that can be verified in the EPM Agent Log Files?
- A. Behavior of the elevation prompt for administrators in Admin Approval Mode is set to "Prompt for Consent for non-Windows binaries".
- B. Agent version is incompatible.
- C. UAC policy Admin Approval for the Built-in Administrator Account is set to "Disabled".
- D. UAC policy Run all administrators in Admin Approval Mode is set to "Enabled".
Answer: D
NEW QUESTION # 41
For Advanced Policies, what can the target operating system users be set to?
- A. AD Groups, Azure AD Groups
- B. Local or AD users and groups, Azure AD User, Azure AD Group
- C. Local or AD users, Azure AD Users
- D. Local or AD users and groups
Answer: D
NEW QUESTION # 42
An application has been identified by the LSASS Credentials Harvesting Module.
What is the recommended approach to excluding the application?
- A. Add the application to an Advanced Policy or Application Group with an Elevate policy action.
- B. In Agent Configurations, add the application to the Threat Protection Exclusions
- C. Add the application to the Files to be Ignored Always in Agent Configurations.
- D. Exclude the application within the LSASS Credentials Harvesting module.
Answer: B
NEW QUESTION # 43
When working with credential rotation at the EPM level, what is the minimum time period that can be set between connections?
- A. 24 hours
- B. 1 hour
- C. 5 hours
- D. 72 hours
Answer: D
NEW QUESTION # 44
CyberArk EPM's Ransomware Protection comes with file types to be protected out of the box. If an EPM Administrator would like to remove a file type from Ransomware Protection, where can this be done?
- A. Policy Scope within Protect Against Ransomware
- B. Protected Files within Agent Configurations
- C. Authorized Applications (Ransomware Protection) within Application Groups
- D. Set Security Permissions within Advanced Policies
Answer: B
NEW QUESTION # 45
Before enabling Ransomware Protection, what should the EPM Administrator do first?
- A. Enable the Privilege Management Inbox in Elevate mode.
- B. Review the Authorized Applications (Ransomware Protection) group and update if necessary.
- C. Enable the Control Applications Downloaded From The Internet feature in Restrict mode.
- D. Enable Threat Protection and Threat Intelligence modules.
Answer: B
NEW QUESTION # 46
A policy needs to be created to block particular applications for a specific user group. Based on CyberArk's policy naming best practices, what should be included in the policy's name?
- A. Policy creation date
- B. The policy's Set name
- C. Target use group
- D. Creator of the policy
Answer: C
NEW QUESTION # 47
Which of the following application options can be used when defining trusted sources?
- A. Product, URL, Machine, Package
- B. Publisher, Name, Size, URI
- C. Publisher, Product, Size, URL
- D. Product, Publisher, User/Group, Installation Package
Answer: D
NEW QUESTION # 48
How does EPM help streamline security compliance and reporting?
- A. Provides reports in standard formats such as PDF, Word and Excel
- B. Use of automated distribution of reports to the security team
- C. Print reports
- D. Create custom reports
Answer: A
NEW QUESTION # 49
......
Pass Your CyberArk Defender EPM-DEF Exam on Jan 22, 2024 with 62 Questions: https://www.testbraindump.com/EPM-DEF-exam-prep.html
Latest CyberArk EPM-DEF PDF and Dumps (2024) Free Exam Questions Answers: https://drive.google.com/open?id=1KT33uCrK7dkRFauqJobTRMbt1Ivb8dkD
