Free CyberArk Defender – EPM Exam EPM-DEF Exam Practice Test

When deploying EPM and in the Privilege Management phase what is the purpose of Discovery?

• To identify all non-administrative events
• To identify all administrative level events
• To identify both administrative and non-administrative level events
• To identify non-administrative threats

What is the CyberArk recommended practice when deploying the EPM agent to non-persistent VDIs?

• A separate set
• a VDI advanced policy
• a separate license
• A separate computer group

Can the EPM Set Administrator configure Audit Dialog Pop-ups for the Record Audit Video option?

• Yes, when Audit Video recording started, when Audit Video recording stopped, and when Audit Recording video reached size limit.
• Yes, when Audit Video recording started, when not enough disk space to start the video recording, and when video recording is initializing.
• Yes, when Audit Video recording started, when Audit Video recording is uploaded to the EPM server, and when audit recording cannot be initialized.
• No, Audit Video is only available without the possibility of having End-User dialog pop-ups.

A Helpdesk technician needs to provide remote assistance to a user whose laptop cannot connect to the Internet to pull EPM policies. What CyberArk EPM feature should the Helpdesk technician use to allow the user elevation capabilities?

• Ofline Policy Authorization Generator
• Elevate Trusted Application If Necessary
• Just In Time Access and Elevation
• Loosely Connected Devices Credential Management

What feature is designed to exclude applications from CyberArk EPM's Ransomware Protection, without whitelisting the application launch?

• Trusted Sources
• Authorized Applications (Ransomware Protection)
• Threat Intelligence
• Policy Recommendations

When working with credential rotation at the EPM level, what is the minimum time period that can be set between connections?

• 1 hour
• 5 hours
• 24 hours
• 72 hours

What is required to configure SAML authentication on EPM?

• OAuth token
• Signed Authentication Request
• Encrypted Assertion
• Signed SAML Response

How does CyberArk EPM's Ransomware Protection feature monitor for Ransomware Attacks?

• It compares known ransomware signatures retrieved from virus databases.
• It sandboxes the suspected ransomware and applies heuristics.
• It monitors for any unauthorized access to specified files.
• It performs a lookup of file signatures against VirusTotal's database.

When enabling Threat Protection policies, what should an EPM Administrator consider? (Choose two.)

• Some Threat Protection policies are applicable only for Windows Servers as opposed to Workstations.
• Certain Threat Protection policies apply for specific applications not found on all machines
• Threat Protection policies requires an additional agent to be installed.
• Threat Protection features are not available in all regions.

In EPM, creation of which user type is required to use SAML?

• Local CyberArk EPM User
• AD User
• SQL User
• Azure AD User