CyberArk EPM-DEF Exam Questions Instant Access

Question 1

An EPM Administrator would like to exclude an application from all Threat Protection modules. Where should the EPM Administrator make this change?

APrivilege Threat Protection under Policies.

BAuthorized Applications under Application Groups.

CProtect Against Ransomware under Default Policies.

DThreat Protection under Agent Configurations.

Answer : B

Question 2

How does CyberArk EPM's Ransomware Protection feature monitor for Ransomware Attacks?

AIt compares known ransomware signatures retrieved from virus databases.

BIt sandboxes the suspected ransomware and applies heuristics.

CIt monitors for any unauthorized access to specified files.

DIt performs a lookup of file signatures against VirusTotal's database.

Answer : B

Question 3

An EPM Administrator would like to notify end users whenever the Elevate policy is granting users elevation for their applications. Where should the EPM Administrator go to enable the end-user dialog?

AEnd-user UI in the left panel of the console

BAdvanced, Agent Configurations

CDefault Policies

DEnd-User UI within the policy

Answer : D

Question 4

For Advanced Policies, what can the target operating system users be set to?

ALocal or AD users and groups, Azure AD User, Azure AD Group

BAD Groups, Azure AD Groups

CLocal or AD users and groups

DLocal or AD users, Azure AD Users

Answer : C

Question 5

Which setting in the agent configuration controls how often the agent sends events to the EPM Server?

AEvent Queue Flush Period

BHeartbeat Timeout

CCondition Timeout

DPolicy Update Rate

Answer : A

Question 6

Where can you view CyberArk EPM Credential Lures events?

AApplication Catalog

BThreat Protection Inbox

CEvents Management

DPolicy Audit

Answer : B

Question 7

Select the default threat intelligence source that requires additional licensing.

AVirusTotal

BPalo Alto WildFire

CCyberArk Application Risk Analysis Service

DNSRL

Answer : B

CyberArk Defender - EPM EPM-DEF Exam Questions