Share Latest Mar-2024 EPM-DEFTest Practice Test Questions, Exam Dumps [Q24-Q39]

Rate this post

Share Latest Mar-2024 EPM-DEFTest Practice Test Questions, Exam Dumps

Positive Aspects of Valid Dumps EPM-DEF Exam Dumps!

Q24. What is the CyberArk recommended practice when deploying the EPM agent to non-persistent VDIs?

A separate set

a VDI advanced policy

a separate license

A separate computer group

Q25. What EPM component is responsible for communicating password changes in credential rotation?

EPM Agent

EPM Server

EPM API

EPM Discovery

Q26. Which policy can be used to improve endpoint performance for applications commonly used for software development?

Developer Applications

Trusted Application

Trusted Source

Software Updater

Q27. After a clean installation of the EPM agent, the local administrator password is not being changed on macOS and the old password can still be used to log in.
What is a possible cause?

Secure Token on macOS endpoint is not enabled.

EPM agent is not able to connect to the EPM server.

After installation, Full Disk Access for the macOS agent to support EPM policies was not approved.

Endpoint password policy is too restrictive.

Q28. What are valid policy options for JIT and elevation policies?

Grant temporary access for all users, Policy name, Restart administrative processes in admin approval mode, Collect audit information

Grant temporary access for, Policy name, Terminate administrative processes when the policy expires, Collect audit information

Grant administrative access, Policy name, Log off to apply policy, Collect policy violation information

Terminate administrative services, Grant policy access for, Policy name, Collect audit reports

Q29. CyberArk EPM’s Ransomware Protection comes with file types to be protected out of the box. If an EPM Administrator would like to remove a file type from Ransomware Protection, where can this be done?

Policy Scope within Protect Against Ransomware

Authorized Applications (Ransomware Protection) within Application Groups

Set Security Permissions within Advanced Policies

Protected Files within Agent Configurations

Q30. How does CyberArk EPM’s Ransomware Protection feature monitor for Ransomware Attacks?

It compares known ransomware signatures retrieved from virus databases.

It sandboxes the suspected ransomware and applies heuristics.

It monitors for any unauthorized access to specified files.

It performs a lookup of file signatures against VirusTotal’s database.

Q31. What unauthorized change can CyberArk EPM Ransomware Protection prevent?

Windows Registry Keys

Website Data

Local Administrator Passwords

Certificates in the Certificate Store

Q32. If you want to diagnose agent EPM agent connectivity issues, what is the agent executable that can be used from the command line?

vf_agent.exe

epm_agent.exe

vault_agent.exe

db_agent.exe

Q33. Which setting in the agent configuration controls how often the agent sends events to the EPM Server?

Condition Timeout

Policy Update Rate

Event Queue Flush Period

Heartbeat Timeout

Q34. For the CyberArk EPM Threat Deception Credential Lure feature, what is the recommendation regarding the username creation?

The username should match to an existing account.

The username should have a strong password associated.

The username should not match to an existing account.

The username should match the built-in local Administrator.

Q35. When enabling Threat Protection policies, what should an EPM Administrator consider? (Choose two.)

Some Threat Protection policies are applicable only for Windows Servers as opposed to Workstations.

Certain Threat Protection policies apply for specific applications not found on all machines

Threat Protection policies requires an additional agent to be installed.

Threat Protection features are not available in all regions.

Q36. Match the Application Groups policy to their correct description.

Q37. For Advanced Policies, what can the target operating system users be set to?

Local or AD users and groups, Azure AD User, Azure AD Group

AD Groups, Azure AD Groups

Local or AD users and groups

Local or AD users, Azure AD Users

Q38. What can you manage by using User Policies?

Just-In-Time endpoint access and elevation, access to removable drives, and Services access.

Access to Windows Services only.

Filesystem and registry access, access to removable drives, and Services access.

Just-In-Time endpoint access and elevation, access to removable drives, filesystem and registry access, Services access, and User account control monitoring.

Q39. An EPM Administrator needs to create a policy to allow the MacOS developers elevation to an application.
What type of policy should be used?

Elevate Application Group

Developer Applications Application Group

Elevate Trusted Applications If Necessary Advanced Policy

Elevate MacOS Policy

Loading …