Free CyberArk Defender – EPM Exam EPM-DEF Exam Practice Test

What are Trusted sources for Windows endpoints used for?

• Creating policies that contain trusted sources of applications.
• Defining applications that can be used by the developers.
• Listing all the approved application to the end users.
• Managing groups added by recommendation.

When enabling Threat Protection policies, what should an EPM Administrator consider? (Choose two.)

• Some Threat Protection policies are applicable only for Windows Servers as opposed to Workstations.
• Certain Threat Protection policies apply for specific applications not found on all machines
• Threat Protection policies requires an additional agent to be installed.
• Threat Protection features are not available in all regions.

Which threat intelligence source requires the suspect file to be sent externally?

• NSRL
• Palo Alto Wildfire
• VirusTotal
• CyberArk Application Risk Analysis Service (ARA)

A Helpdesk technician needs to provide remote assistance to a user whose laptop cannot connect to the Internet to pull EPM policies. What CyberArk EPM feature should the Helpdesk technician use to allow the user elevation capabilities?

• Ofline Policy Authorization Generator
• Elevate Trusted Application If Necessary
• Just In Time Access and Elevation
• Loosely Connected Devices Credential Management

Where would an EPM admin configure an application policy that depends on a script returning true for an end user's machine being connected to an open (no password protection) Wi-Fi?

• Advanced Policy - Application Control - Check Wi-Fi security
• Advanced Policy - Options: Conditional enforcement - Apply Policy according to Script execution result
• Default policies - Check if network access is secure
• Advanced Policy - Access - Specify permissions to be set for Wi-Fi network security

What is a valid step to investigate an EPM agent that is unable to connect to the EPM server?

• On the end point, open a browser session to the URL of the EPM server.
• Ping the endpoint from the EPM server.
• Ping the server from the endpoint.
• Restart the end point

On the Default Policies page, what are the names of policies that can be set as soon as EPM is deployed?

• Privilege Escalation, Privilege Management, Application Management
• Privilege Management, Application Control, Threat analysis
• Privilege Management, Threat Protection, Application Escalation Control
• Privilege Management, Privilege Threat Protection, Local Privileged Accounts Management

An EPM Administrator would like to enable a Threat Protection policy, however, the policy protects an application that is not installed on all endpoints.What should the EPM Administrator do?

• Enable the Threat Protection policy and configure the Policy Targets.
• Do not enable the Threat Protection policy.
• Enable the Threat Protection policy only in Detect mode.
• Split up the endpoints in to separate Sets and enable Threat Protection for only one of the Sets.

An EPM Administrator needs to create a policy to allow the MacOS developers elevation to an application. What type of policy should be used?

• Elevate Application Group
• Developer Applications Application Group
• Elevate Trusted Applications If Necessary Advanced Policy
• Elevate MacOS Policy

After a clean installation of the EPM agent, the local administrator password is not being changed onmacOS and the old password can still be used to log in. What is a possible cause?

• Secure Token on macOS endpoint is not enabled.
• EPM agent is not able to connect to the EPM server.
• After installation, Full Disk Access for the macOS agent to support EPM policies was not approved.
• Endpoint password policy is too restrictive.