CyberArk EPM-DEF Exam Questions Instant Access

Question 1

When enabling Threat Protection policies, what should an EPM Administrator consider? (Choose two.)

ASome Threat Protection policies are applicable only for Windows Servers as opposed to Workstations.

BCertain Threat Protection policies apply for specific applications not found on all machines

CThreat Protection policies requires an additional agent to be installed.

DThreat Protection features are not available in all regions.

Answer : A, B

Question 2

When working with credential rotation/loosely connected devices, what additional CyberArk components are required?

APTA

CPVWA

DDAP

Answer : C

Question 3

If you want to diagnose agent EPM agent connectivity issues, what is the agent executable that can be used from the command line?

Avf_agent.exe

Bepm_agent.exe

Cvault_agent.exe

Ddb_agent.exe

Answer : B

Question 4

An end user is reporting that an application that needs administrative rights is crashing when selecting a certain option menu item. The Application is part of an advanced elevate policy and is working correctly except when using that menu item.

What could be the EPM cause of the error?

AThe Users defined in the advanced policy do not include the end user running the application.

BThe Advanced: Time options are not set correctly to include the time that the user is running the application at.

CThe Elevate Child Processes option is not enabled.

DThe Specify permissions to be set for selected Services on End-user Computers is set to Allow Start/Stop

Answer : C

Question 5

What can you manage by using User Policies?

AJust-In-Time endpoint access and elevation, access to removable drives, and Services access.

BAccess to Windows Services only.

CFilesystem and registry access, access to removable drives, and Services access.

DJust-In-Time endpoint access and elevation, access to removable drives, filesystem and registry access, Services access, and User account control monitoring.

Answer : D

Question 6

After a clean installation of the EPM agent, the local administrator password is not being changed on macOS and the old password can still be used to log in.

What is a possible cause?

ASecure Token on macOS endpoint is not enabled.

BEPM agent is not able to connect to the EPM server.

CAfter installation, Full Disk Access for the macOS agent to support EPM policies was not approved.

DEndpoint password policy is too restrictive.

Answer : A

Question 7

What is a valid step to investigate an EPM agent that is unable to connect to the EPM server?

AOn the end point, open a browser session to the URL of the EPM server.

BPing the endpoint from the EPM server.

CPing the server from the endpoint.

DRestart the end point

Answer : C

CyberArk Defender - EPM EPM-DEF Exam Questions