[2023] Pass EPM-DEF Exam - Real Questions & Answers [Q31-Q56]

[2023] Pass EPM-DEF Exam - Real Questions and Answers

EPM-DEF Exam Questions Get Updated [2023] with Correct Answers

By obtaining the CyberArk EPM-DEF Certification, cybersecurity professionals can showcase their expertise in endpoint privilege management and differentiate themselves in the job market. CyberArk Defender - EPM certification is recognized globally and is an excellent way for professionals to validate their skills and knowledge in the field of cybersecurity.

 

NEW QUESTION # 31
How does EPM help streamline security compliance and reporting?

• A. Provides reports in standard formats such as PDF, Word and Excel
• B. Print reports
• C. Use of automated distribution of reports to the security team
• D. Create custom reports

Answer: A

NEW QUESTION # 32
CyberArk's Privilege Threat Protection policies are available for which Operating Systems? (Choose two.)

• A. Windows Servers
• B. Linux
• C. MacOS
• D. Windows Workstations

Answer: A,D

NEW QUESTION # 33
A particular user in company ABC requires the ability to run any application with administrative privileges every day that they log in to their systems for a total duration of 5 working days.
What is the correct solution that an EPM admin can implement?

• A. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to
  120 hours and Terminate administrative processes when the policy expires option unchecked
• B. An EPM admin can create an authorization token for each application needed by running:
  EPMOPAGtool.exe -command gentoken -targetUser <username> -filehash <file hash> -timeLimit 120
  -action run
• C. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to
  120 hours
• D. An EPM admin can create a secure token for the end user's computer and instruct the end user to open an administrative command prompt and run the command vfagent.exe -UseToken <securetoken_value>

Answer: A

NEW QUESTION # 34
What are Trusted sources for Windows endpoints used for?

• A. Listing all the approved application to the end users.
• B. Creating policies that contain trusted sources of applications.
• C. Managing groups added by recommendation.
• D. Defining applications that can be used by the developers.

Answer: A

NEW QUESTION # 35
What can you manage by using User Policies?

• A. Just-In-Time endpoint access and elevation, access to removable drives, filesystem and registry access, Services access, and User account control monitoring.
• B. Access to Windows Services only.
• C. Filesystem and registry access, access to removable drives, and Services access.
• D. Just-In-Time endpoint access and elevation, access to removable drives, and Services access.

Answer: A

NEW QUESTION # 36
An end user is reporting that an application that needs administrative rights is crashing when selecting a certain option menu item. The Application is part of an advanced elevate policy and is working correctly except when using that menu item.
What could be the EPM cause of the error?

• A. The Elevate Child Processes option is not enabled.
• B. The Advanced: Time options are not set correctly to include the time that the user is running the application at.
• C. The Users defined in the advanced policy do not include the end user running the application.
• D. The Specify permissions to be set for selected Services on End-user Computers is set to Allow Start/Stop

Answer: A

NEW QUESTION # 37
Match the Application Groups policy to their correct description.

Answer:

Explanation:

NEW QUESTION # 38
An EPM Administrator would like to enable a Threat Protection policy, however, the policy protects an application that is not installed on all endpoints.
What should the EPM Administrator do?

• A. Do not enable the Threat Protection policy.
• B. Enable the Threat Protection policy and configure the Policy Targets.
• C. Split up the endpoints in to separate Sets and enable Threat Protection for only one of the Sets.
• D. Enable the Threat Protection policy only in Detect mode.

Answer: C

NEW QUESTION # 39
When deploying Ransomware Protection, what tasks should be considered before enabling this functionality?
(Choose two.)

• A. Add trusted software to the Allow Application Group
• B. Add trusted software to the Authorized Applications (Ransomware protection) Application Group
• C. Add additional files, folders, and/or file extensions to be included to Ransomware Protection
• D. Enable Detect privileged unhandled applications under Default Policies

Answer: B,C

NEW QUESTION # 40
An application has been identified by the LSASS Credentials Harvesting Module.
What is the recommended approach to excluding the application?

• A. Exclude the application within the LSASS Credentials Harvesting module.
• B. In Agent Configurations, add the application to the Threat Protection Exclusions
• C. Add the application to the Files to be Ignored Always in Agent Configurations.
• D. Add the application to an Advanced Policy or Application Group with an Elevate policy action.

Answer: B

NEW QUESTION # 41
A policy needs to be created to block particular applications for a specific user group. Based on CyberArk's policy naming best practices, what should be included in the policy's name?

• A. Target use group
• B. The policy's Set name
• C. Policy creation date
• D. Creator of the policy

Answer: A

NEW QUESTION # 42
On the Default Policies page, what are the names of policies that can be set as soon as EPM is deployed?

• A. Privilege Management, Privilege Threat Protection, Local Privileged Accounts Management
• B. Privilege Management, Threat Protection, Application Escalation Control
• C. Privilege Escalation, Privilege Management, Application Management
• D. Privilege Management, Application Control, Threat analysis

Answer: A

NEW QUESTION # 43
In EPM, creation of which user type is required to use SAML?

• A. SQL User
• B. Azure AD User
• C. AD User
• D. Local CyberArk EPM User

Answer: B

NEW QUESTION # 44
What is the CyberArk recommended practice when deploying the EPM agent to non-persistent VDIs?

• A. a VDI advanced policy
• B. a separate license
• C. A separate computer group
• D. A separate set

Answer: C

NEW QUESTION # 45
What is a valid step to investigate an EPM agent that is unable to connect to the EPM server?

• A. Ping the server from the endpoint.
• B. Ping the endpoint from the EPM server.
• C. On the end point, open a browser session to the URL of the EPM server.
• D. Restart the end point

Answer: A

NEW QUESTION # 46
Where can you view CyberArk EPM Credential Lures events?

• A. Threat Protection Inbox
• B. Policy Audit
• C. Application Catalog
• D. Events Management

Answer: A

NEW QUESTION # 47
An EPM Administrator is looking to enable the Threat Deception feature, under what section should the EPM Administrator go to enable this feature?

• A. Policy Audit
• B. Threat Protection Inbox
• C. Threat Intelligence
• D. Policies

Answer: D

NEW QUESTION # 48
When working with credential rotation/loosely connected devices, what additional CyberArk components are required?

• A.
• B. DAP
• C. PVWA
• D. PTA

Answer: C

NEW QUESTION # 49
An EPM Administrator needs to create a policy to allow the MacOS developers elevation to an application.
What type of policy should be used?

• A. Elevate MacOS Policy
• B. Developer Applications Application Group
• C. Elevate Application Group
• D. Elevate Trusted Applications If Necessary Advanced Policy

Answer: D

NEW QUESTION # 50
Match the Trusted Source to its correct definition:

Answer:

Explanation:

NEW QUESTION # 51
Which of the following is CyberArk's Recommended FIRST roll out strategy?

• A. Implement Application Control
• B. Implement Threat Detection
• C. Implement Ransomware Protection
• D. Implement Privilege Management

Answer: D

NEW QUESTION # 52
Which threat intelligence source requires the suspect file to be sent externally?

• A. VirusTotal
• B. NSRL
• C. CyberArk Application Risk Analysis Service (ARA)
• D. Palo Alto Wildfire

Answer: A

NEW QUESTION # 53
Which programming interface enables you to perform activities on EPM objects via a REST Web Service?

• A. EPM Web Services SDK
• B. Application Password SDK
• C. Mac Credential Provider SDK
• D. Java password SDK

Answer: A

NEW QUESTION # 54
After a clean installation of the EPM agent, the local administrator password is not being changed on macOS and the old password can still be used to log in.
What is a possible cause?

• A. Endpoint password policy is too restrictive.
• B. EPM agent is not able to connect to the EPM server.
• C. After installation, Full Disk Access for the macOS agent to support EPM policies was not approved.
• D. Secure Token on macOS endpoint is not enabled.

Answer: D

NEW QUESTION # 55
......

Practice EPM-DEF Questions With Certification guide Q&A from Training Expert DumpExam: https://www.dumpexam.com/EPM-DEF-valid-torrent.html

Free CyberArk EPM-DEF Test Practice Test Questions Exam Dumps: https://drive.google.com/open?id=14yFOwkiLk24l_vx9BTSGtjfANYVO79me