[Oct-2023] Use Real EPM-DEF Dumps Free Sample Questions and Practice Test Engine [Q30-Q48]

4/5 - (1 vote)

[Oct-2023] Use Real EPM-DEF Dumps Free Sample Questions and Practice Test Engine

Pass CyberArk EPM-DEF exam – questions – convert Tets Engine to PDF

QUESTION 30
What is a valid step to investigate an EPM agent that is unable to connect to the EPM server?

On the end point, open a browser session to the URL of the EPM server.

Ping the endpoint from the EPM server.

Ping the server from the endpoint.

Restart the end point

QUESTION 31
An EPM Administrator would like to notify end users whenever the Elevate policy is granting users elevation for their applications. Where should the EPM Administrator go to enable the end-user dialog?

End-user UI in the left panel of the console

Advanced, Agent Configurations

Default Policies

End-User UI within the policy

QUESTION 32
Which policy can be used to improve endpoint performance for applications commonly used for software development?

Developer Applications

Trusted Application

Trusted Source

Software Updater

QUESTION 33
An end user is experiencing performance issues on their device after the EPM Agent had been installed on their machine. What should the EPM Administrator do first to help resolve the issue?

Verify any 3rd party security solutions have been added to EPM’s Files To Be Ignored Always configuration and CyberArk EPM has also been excluded from the 3rd party security solutions.

Enable the Default Policy’s Privilege Management Control, Unhandled Privileged Applications in Elevate mode.

Rerun the agent installation on the user’s machine to repair the installation.

Uninstall or disable any anti-virus software prohibiting the EPM Agent functionalities.

QUESTION 34
An application has been identified by the LSASS Credentials Harvesting Module.
What is the recommended approach to excluding the application?

In Agent Configurations, add the application to the Threat Protection Exclusions

Add the application to the Files to be Ignored Always in Agent Configurations.

Exclude the application within the LSASS Credentials Harvesting module.

Add the application to an Advanced Policy or Application Group with an Elevate policy action.

QUESTION 35
What are the predefined application groups?

Developer group, Administrator group

Run as Administrator, Run as Developer, Block

Elevate, Allow, Block, Developer Applications

Block Only

QUESTION 36
When deploying Ransomware Protection, what tasks should be considered before enabling this functionality?
(Choose two.)

Add trusted software to the Authorized Applications (Ransomware protection) Application Group

Add trusted software to the Allow Application Group

Add additional files, folders, and/or file extensions to be included to Ransomware Protection

Enable Detect privileged unhandled applications under Default Policies

QUESTION 37
When adding the EPM agent to a pre-existing security stack on workstation, what two steps are CyberArk recommendations. (Choose two.)

Add any pre-existing security application to the Files to Be Ignored Always.

Add EPM agent to the other security tools exclusions.

EPM agent should never be run with any other security tools.

Create new advanced policies for each security tool.

QUESTION 38
What can you manage by using User Policies?

Just-In-Time endpoint access and elevation, access to removable drives, and Services access.

Access to Windows Services only.

Filesystem and registry access, access to removable drives, and Services access.

Just-In-Time endpoint access and elevation, access to removable drives, filesystem and registry access, Services access, and User account control monitoring.

QUESTION 39
What unauthorized change can CyberArk EPM Ransomware Protection prevent?

Windows Registry Keys

Website Data

Local Administrator Passwords

Certificates in the Certificate Store

QUESTION 40
What are Trusted sources for Windows endpoints used for?

Creating policies that contain trusted sources of applications.

Defining applications that can be used by the developers.

Listing all the approved application to the end users.

Managing groups added by recommendation.

QUESTION 41
An EPM Administrator would like to enable CyberArk EPM’s Ransomware Protection in Restrict mode. What should the EPM Administrator do?

Set Block unhandled applications to On.

Set Protect Against Ransomware to Restrict.

Set Protect Against Ransomware to Restrict and Set Block unhandled applications to On.

Set Control unhandled applications to Detect.

QUESTION 42
On the Default Policies page, what are the names of policies that can be set as soon as EPM is deployed?

Privilege Escalation, Privilege Management, Application Management

Privilege Management, Application Control, Threat analysis

Privilege Management, Threat Protection, Application Escalation Control

Privilege Management, Privilege Threat Protection, Local Privileged Accounts Management

QUESTION 43
A policy needs to be created to block particular applications for a specific user group. Based on CyberArk’s policy naming best practices, what should be included in the policy’s name?

Policy creation date

Target use group

Creator of the policy

The policy’s Set name

QUESTION 44
After a clean installation of the EPM agent, the local administrator password is not being changed on macOS and the old password can still be used to log in.
What is a possible cause?

Secure Token on macOS endpoint is not enabled.

EPM agent is not able to connect to the EPM server.

After installation, Full Disk Access for the macOS agent to support EPM policies was not approved.

Endpoint password policy is too restrictive.

QUESTION 45
Which threat intelligence source requires the suspect file to be sent externally?

NSRL

Palo Alto Wildfire

VirusTotal

CyberArk Application Risk Analysis Service (ARA)

QUESTION 46
Which of the following is CyberArk’s Recommended FIRST roll out strategy?

Implement Application Control

Implement Privilege Management