CyberArk epm-def practice test

What are Trusted sources for Windows endpoints used for?

• A. Creating policies that contain trusted sources of applications.
• B. Defining applications that can be used by the developers.
• C. Listing all the approved application to the end users.
• D. Managing groups added by recommendation.

CyberArk's Privilege Threat Protection policies are available for which Operating Systems? (Choose
two.)

• A. Windows Workstations
• B. Windows Servers
• C. MacOS
• D. Linux

Which threat intelligence source requires the suspect file to be sent externally?

• A. NSRL
• B. Palo Alto Wildfire
• C. VirusTotal
• D. CyberArk Application Risk Analysis Service (ARA)

What feature is designed to exclude applications from CyberArk EPM's Ransomware Protection,
without whitelisting the application launch?

• A. Trusted Sources
• B. Authorized Applications (Ransomware Protection)
• C. Threat Intelligence
• D. Policy Recommendations

An EPM Administrator would like to exclude an application from all Threat Protection modules.
Where should the EPM Administrator make this change?

• A. Privilege Threat Protection under Policies.
• B. Authorized Applications under Application Groups.
• C. Protect Against Ransomware under Default Policies.
• D. Threat Protection under Agent Configurations.

Which EPM reporting tool provides a comprehensive view of threat detection activity?

• A. Threat Detection Dashboard
• B. Detected Threats
• C. Threat Detection Events
• D. McAfee ePO Reports

What type of user can be created from the Threat Deception LSASS Credential Lures feature?

• A. It does not create any users
• B. A standard user
• C. A local administrator user
• D. A domain admin user

What is a valid step to investigate an EPM agent that is unable to connect to the EPM server?

• A. On the end point, open a browser session to the URL of the EPM server.
• B. Ping the endpoint from the EPM server.
• C. Ping the server from the endpoint.
• D. Restart the end point

Which programming interface enables you to perform activities on EPM objects via a REST Web
Service?

• A. EPM Web Services SDK
• B. Application Password SDK
• C. Mac Credential Provider SDK
• D. Java password SDK

What are the policy targeting options available for a policy upon creation?

• A. AD Users and Groups, Computers in AD Security Groups, Servers
• B. Computers in this set, Computers in AD Security Groups, Users and Groups
• C. OS Computers, EPM Sets, AD Users
• D. EPM Sets, Computers in AD Security Groups, AD Users and AD Security Groups