First Attempt Guaranteed Success in EPM-DEF Exam 2023 [Q32-Q51]

4/5 - (1 vote)

First Attempt Guaranteed Success in EPM-DEF Exam 2023

Real EPM-DEF Exam Questions are the Best Preparation Material

NO.32 Before enabling Ransomware Protection, what should the EPM Administrator do first?

Enable the Privilege Management Inbox in Elevate mode.

Enable the Control Applications Downloaded From The Internet feature in Restrict mode.

Review the Authorized Applications (Ransomware Protection) group and update if necessary.

Enable Threat Protection and Threat Intelligence modules.

NO.33 A Helpdesk technician needs to provide remote assistance to a user whose laptop cannot connect to the Internet to pull EPM policies. What CyberArk EPM feature should the Helpdesk technician use to allow the user elevation capabilities?

Offline Policy Authorization Generator

Elevate Trusted Application If Necessary

Just In Time Access and Elevation

Loosely Connected Devices Credential Management

NO.34 Where would an EPM admin configure an application policy that depends on a script returning true for an end user’s machine being connected to an open (no password protection) Wi-Fi?

Advanced Policy – Application Control – Check Wi-Fi security

Advanced Policy – Options: Conditional enforcement – Apply Policy according to Script execution result

Default policies – Check if network access is secure

Advanced Policy – Access – Specify permissions to be set for Wi-Fi network security

NO.35 An end user is reporting that an application that needs administrative rights is crashing when selecting a certain option menu item. The Application is part of an advanced elevate policy and is working correctly except when using that menu item.
What could be the EPM cause of the error?

The Users defined in the advanced policy do not include the end user running the application.

The Advanced: Time options are not set correctly to include the time that the user is running the application at.

The Elevate Child Processes option is not enabled.

The Specify permissions to be set for selected Services on End-user Computers is set to Allow Start/Stop

NO.36 An EPM Administrator would like to enable a Threat Protection policy, however, the policy protects an application that is not installed on all endpoints.
What should the EPM Administrator do?

Enable the Threat Protection policy and configure the Policy Targets.

Do not enable the Threat Protection policy.

Enable the Threat Protection policy only in Detect mode.

Split up the endpoints in to separate Sets and enable Threat Protection for only one of the Sets.

NO.37 Which programming interface enables you to perform activities on EPM objects via a REST Web Service?

EPM Web Services SDK

Application Password SDK

Mac Credential Provider SDK

Java password SDK

NO.38 Where can you view CyberArk EPM Credential Lures events?

Application Catalog

Threat Protection Inbox

Events Management

Policy Audit

NO.39 Select the default threat intelligence source that requires additional licensing.

Palo Alto WildFire

VirusTotal

CyberArk Application Risk Analysis Service

NSRL

NO.40 If you want to diagnose agent EPM agent connectivity issues, what is the agent executable that can be used from the command line?

vf_agent.exe

epm_agent.exe

vault_agent.exe

db_agent.exe

NO.41 A policy needs to be created to block particular applications for a specific user group. Based on CyberArk’s policy naming best practices, what should be included in the policy’s name?

Policy creation date

Target use group

Creator of the policy

The policy’s Set name

NO.42 What are valid policy options for JIT and elevation policies?

Grant temporary access for all users, Policy name, Restart administrative processes in admin approval mode, Collect audit information

Grant temporary access for, Policy name, Terminate administrative processes when the policy expires, Collect audit information

Grant administrative access, Policy name, Log off to apply policy, Collect policy violation information

Terminate administrative services, Grant policy access for, Policy name, Collect audit reports

NO.43 What unauthorized change can CyberArk EPM Ransomware Protection prevent?

Windows Registry Keys

Website Data

Local Administrator Passwords

Certificates in the Certificate Store

NO.44 How does a Trusted Source policy affect an application?

Applications will be allowed to run and will only elevate if required.

Applications will be allowed to run and will inherit the process token from the EPM agent.

Applications will be allowed to run always in elevated mode.

Application from the defined trusted sources must be configured on a per application basis, in order to define run and elevation parameters.

NO.45 What feature is designed to exclude applications from CyberArk EPM’s Ransomware Protection, without whitelisting the application launch?

Trusted Sources

Authorized Applications (Ransomware Protection)

Threat Intelligence

Policy Recommendations

NO.46 What are the policy targeting options available for a policy upon creation?

AD Users and Groups, Computers in AD Security Groups, Servers

Computers in this set, Computers in AD Security Groups, Users and Groups

OS Computers, EPM Sets, AD Users

EPM Sets, Computers in AD Security Groups, AD Users and AD Security Groups

NO.47 On the Default Policies page, what are the names of policies that can be set as soon as EPM is deployed?

Privilege Escalation, Privilege Management, Application Management

Privilege Management, Application Control, Threat analysis

Privilege Management, Threat Protection, Application Escalation Control

Privilege Management, Privilege Threat Protection, Local Privileged Accounts Management

NO.48 What can you manage by using User Policies?

Just-In-Time endpoint access and elevation, access to removable drives, and Services access.

Access to Windows Services only.

Filesystem and registry access, access to removable drives, and Services access.

Just-In-Time endpoint access and elevation, access to removable drives, filesystem and registry access, Services access, and User account control monitoring.

NO.49 Which of the following application options can be used when defining trusted sources?

Publisher, Product, Size, URL

Publisher, Name, Size, URI

Product, URL, Machine, Package

Product, Publisher, User/Group, Installation Package

NO.50 Which user or group will not be removed as part of CyberArk EPM’s Remove Local Administrators feature?

Built-in Local Administrator

Domain Users

Admin Users

Power Users

NO.51 When adding the EPM agent to a pre-existing security stack on workstation, what two steps are CyberArk recommendations. (Choose two.)

Add any pre-existing security application to the Files to Be Ignored Always.

Add EPM agent to the other security tools exclusions.

EPM agent should never be run with any other security tools.

Create new advanced policies for each security tool.

Loading …

The CyberArk EPM-DEF Exam is intended for security professionals who have experience in implementing and managing endpoint security solutions. The exam covers a range of topics related to EPM, including installation and configuration, policy management, event management, and reporting. The exam is designed to assess the candidate’s ability to design, implement, and manage EPM solutions in a variety of environments, including Windows, Linux, and macOS. Upon passing the exam, candidates will receive a certification that demonstrates their expertise in implementing and managing CyberArk’s EPM solution.

Practice LATEST EPM-DEF Exam Updated 62 Questions: https://www.prepawaypdf.com/CyberArk/EPM-DEF-practice-exam-dumps.html

Latest [Mar 30, 2022] CAU201 Exam Questions – Valid CAU201 Dumps Pdf [Q96-Q114]

Related posts:

admin

You might also like

Leave a Reply Cancel reply