Free Demo Questions

Test Online Free CyberArk EPM-DEF Exam Questions and Answers

Practice a live sample before buying full access. This page keeps the free EPM-DEF question set organized by page so visitors and search engines can reach the canonical -questions.html URL directly.

Updated May 19, 2023 12 Questions 1 Pages

Get EPM-DEF Full Access

Question 1 Selectable Answer

Which user or group will not be removed as part of CyberArk EPM's Remove Local Administrators feature?

A. Built-in Local Administrator
B. Domain Users
C. Admin Users
D. Power Users

Answer:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM/21.9/en/Content/EPM/Server%20User%20Guide/ManageLocalAdmin istrators.htm

Question 2 Selectable Answer

When deploying Ransomware Protection, what tasks should be considered before enabling this functionality? (Choose two.)

A. Add trusted software to the Authorized Applications (Ransomware protection) Application Group
B. Add trusted software to the Allow Application Group
C. Add additional files, folders, and/or file extensions to be included to Ransomware Protection
D. Enable Detect privileged unhandled applications under Default Policies

Answer:

Question 3 Selectable Answer

Before enabling Ransomware Protection, what should the EPM Administrator do first?

A. Enable the Privilege Management Inbox in Elevate mode.
B. Enable the Control Applications Downloaded From The Internet feature in Restrict mode.
C. Review the Authorized Applications (Ransomware Protection) group and update if necessary.
D. Enable Threat Protection and Threat Intelligence modules.

Answer:

Question 4 Selectable Answer

What EPM component is responsible for communicating password changes in credential rotation?

A. EPM Agent
B. EPM Server
C. EPM API
D. EPM Discovery

Answer:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM/Latest/en/Content/Policies/CredentialsRotation-NewUI.htm

Question 5 Selectable Answer

Which EPM reporting tool provides a comprehensive view of threat detection activity?

A. Threat Detection Dashboard
B. Detected Threats
C. Threat Detection Events
D. McAfee ePO Reports

Answer:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM-onprem/Latest/en/Content/EPM/Server%20User%20Guide/Reporting%20Capabilities.htm#:~:text=The%20Threat%20Detection%20Dashboard%20provides,select%20Reports%20% 3E%20Threat%20Detection%20Dashboard

Question 6 Selectable Answer

Where can you view CyberArk EPM Credential Lures events?

A. Application Catalog
B. Threat Protection Inbox
C. Events Management
D. Policy Audit

Answer:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM/21.7/en/Content/EPM/Server%20User%20Guide/Threat%20Detection%20Events.htm#:~:text=View%20events&text=You%20can%20filter%20the%20list,event %20and%20display%20more%20details

Question 7 Selectable Answer

In EPM, creation of which user type is required to use SAML?

A. Local CyberArk EPM User
B. AD User
C. SQL User
D. Azure AD User

Answer:

Question 8 Selectable Answer

After a clean installation of the EPM agent, the local administrator password is not being changed on macOS and the old password can still be used to log in.
What is a possible cause?

A. Secure Token on macOS endpoint is not enabled.
B. EPM agent is not able to connect to the EPM server.
C. After installation, Full Disk Access for the macOS agent to support EPM policies was not approved.
D. Endpoint password policy is too restrictive.

Answer:

Question 9 Selectable Answer

When adding the EPM agent to a pre-existing security stack on workstation, what two steps are CyberArk recommendations. (Choose two.)

A. Add any pre-existing security application to the Files to Be Ignored Always.
B. Add EPM agent to the other security tools exclusions.
C. EPM agent should never be run with any other security tools.
D. Create new advanced policies for each security tool.

Answer:

Question 10 Selectable Answer

When working with credential rotation/loosely connected devices, what additional CyberArk components are required?

A. PTA
B. PVWA
C. DAP

Answer:

Question 11 Selectable Answer

When deploying EPM and in the Privilege Management phase what is the purpose of Discovery?

A. To identify all non-administrative events
B. To identify all administrative level events
C. To identify both administrative and non-administrative level events
D. To identify non-administrative threats

Answer:

Question 12 Selectable Answer

An EPM Administrator is looking to enable the Threat Deception feature, under what section should the EPM Administrator go to enable this feature?

A. Threat Protection Inbox
B. Policies
C. Threat Intelligence
D. Policy Audit

Answer:

Current Exam

EPM-DEF

CyberArk
CyberArk Defender - EPM

View Full EPM-DEF Package