EPM-DEF CyberArk Defender-EPM Exam Online Dumps (Former Code CAU310)

dumps2023-05-29T10:48:39+08:00

The CyberArk Defender – EPM exam is typically taken by IT professionals, security administrators, and cybersecurity practitioners who are responsible for implementing, managing, and securing privileged access on endpoints within an organization. The EPM-DEF (former code CAU310) exam measures the candidate’s understanding of CyberArk EPM features, concepts, and best practices for securing privileged access, as well as their ability to configure, administer, and troubleshoot the EPM solution.

The real EPM-DEF CyberArk Defender-EPM exam has 65 multiple-choice questions, and candidates have 90 minutes to answer all the questions. The required passing score for EPM-DEF exam is 70%. The exam fee is $200. We provide the latest EPM-DEF CyberArk Defender-EPM exam online dumps for you to study. Free CyberArk Certification EPM-DEF exam dumps are below.

Page 1 of 2

1. DRAG DROP

Match the Trusted Source to its correct definition:

2. A Helpdesk technician needs to provide remote assistance to a user whose laptop cannot connect to the Internet to pull EPM policies.

What CyberArk EPM feature should the Helpdesk technician use to allow the user elevation capabilities?

Offline Policy Authorization Generator

Elevate Trusted Application If Necessary

Just In Time Access and Elevation

Loosely Connected Devices Credential Management

3. Which policy can be used to improve endpoint performance for applications commonly used for software development?

Developer Applications

Trusted Application

Trusted Source

Software Updater

4. Which of the following application options can be used when defining trusted sources?

Publisher, Product, Size, URL

Publisher, Name, Size, URI

Product, URL, Machine, Package

Product, Publisher, User/Group, Installation Package

5. An EPM Administrator is looking to enable the Threat Deception feature, under what section should the EPM Administrator go to enable this feature?

Threat Protection Inbox

Policies

Threat Intelligence

Policy Audit

6. An EPM Administrator would like to enable CyberArk EPM's Ransomware Protection in Restrict mode.

What should the EPM Administrator do?

Set Block unhandled applications to On.

Set Protect Against Ransomware to Restrict.

Set Protect Against Ransomware to Restrict and Set Block unhandled applications to On.

Set Control unhandled applications to Detect.

7. An EPM Administrator would like to enable a Threat Protection policy, however, the policy protects an application that is not installed on all endpoints.

What should the EPM Administrator do?

Enable the Threat Protection policy and configure the Policy Targets.

Do not enable the Threat Protection policy.

Enable the Threat Protection policy only in Detect mode.

Split up the endpoints in to separate Sets and enable Threat Protection for only one of the Sets.

8. After a clean installation of the EPM agent, the local administrator password is not being changed on macOS and the old password can still be used to log in.

What is a possible cause?

Secure Token on macOS endpoint is not enabled.

EPM agent is not able to connect to the EPM server.

After installation, Full Disk Access for the macOS agent to support EPM policies was not approved.

Endpoint password policy is too restrictive.

9. In EPM, creation of which user type is required to use SAML?

Local CyberArk EPM User

AD User

SQL User

Azure AD User

10. A company is looking to manage their Windows Servers and Desktops with CyberArk EPM. Management would like to define different default policies between the Windows Servers and Windows Desktops.

What should the EPM Administrator do?

In the Default Policies, exclude either the Windows Servers or the Windows Desktops.

Create Advanced Policies to apply different policies between Windows Servers and Windows Desktops.

CyberArk does not recommend installing EPM Agents on Windows Servers.

Create a separate Set for Windows Servers and Windows Desktops.

Page 2 of 2

11. Before enabling Ransomware Protection, what should the EPM Administrator do first?

Enable the Privilege Management Inbox in Elevate mode.

Enable the Control Applications Downloaded From The Internet feature in Restrict mode.

Review the Authorized Applications (Ransomware Protection) group and update if necessary.

Enable Threat Protection and Threat Intelligence modules.

12. What is the CyberArk recommended practice when deploying the EPM agent to non-persistent VDIs?

A separate set

a VDI advanced policy

a separate license

A separate computer group

13. If you want to diagnose agent EPM agent connectivity issues, what is the agent executable that can be used from the command line?

vf_agent.exe

epm_agent.exe

vault_agent.exe

db_agent.exe

14. What unauthorized change can CyberArk EPM Ransomware Protection prevent?

Windows Registry Keys

Website Data

Local Administrator Passwords

Certificates in the Certificate Store

15. How does CyberArk EPM's Ransomware Protection feature monitor for Ransomware Attacks?

It compares known ransomware signatures retrieved from virus databases.

It sandboxes the suspected ransomware and applies heuristics.

It monitors for any unauthorized access to specified files.

It performs a lookup of file signatures against VirusTotal's database.

16. On the Default Policies page, what are the names of policies that can be set as soon as EPM is deployed?

Privilege Escalation, Privilege Management, Application Management

Privilege Management, Application Control, Threat analysis

Privilege Management, Threat Protection, Application Escalation Control

Privilege Management, Privilege Threat Protection, Local Privileged Accounts Management

17. An EPM Administrator would like to notify end users whenever the Elevate policy is granting users elevation for their applications. Where should the EPM Administrator go to enable the end-user dialog?

End-user UI in the left panel of the console

Advanced, Agent Configurations

Default Policies

End-User UI within the policy

18. Can the EPM Set Administrator configure Audit Dialog Pop-ups for the Record Audit Video option?

Yes, when Audit Video recording started, when Audit Video recording stopped, and when Audit Recording video reached size limit.

Yes, when Audit Video recording started, when not enough disk space to start the video recording, and when video recording is initializing.

Yes, when Audit Video recording started, when Audit Video recording is uploaded to the EPM server, and when audit recording cannot be initialized.

No, Audit Video is only available without the possibility of having End-User dialog pop-ups.

EPM-DEF CyberArk Defender-EPM Exam Online Dumps (Former Code CAU310)

EPM-DEF CyberArk Defender-EPM Exam Online Dumps (Former Code CAU310)

Share this post

Leave a Reply Cancel reply

Related Posts