CyberArk EPM-DEF Practice Questions| TestInsights

Question 1

Where would an EPM admin configure an application policy that depends on a script returning true for an end user's machine being connected to an open (no password protection) Wi-Fi?

AAdvanced Policy - Application Control - Check Wi-Fi security

BAdvanced Policy - Options: Conditional enforcement - Apply Policy according to Script execution result

CDefault policies - Check if network access is secure

DAdvanced Policy - Access - Specify permissions to be set for Wi-Fi network security

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AAdvanced Policy - Application Control - Check Wi-Fi security

BAdvanced Policy - Options: Conditional enforcement - Apply Policy according to Script execution result

CDefault policies - Check if network access is secure

DAdvanced Policy - Access - Specify permissions to be set for Wi-Fi network security

Question 2

A particular user in company ABC requires the ability to run any application with administrative privileges every day that they log in to their systems for a total duration of 5 working days.

What is the correct solution that an EPM admin can implement?

AAn EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to 120 hours

BAn EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to 120 hours and Terminate administrative processes when the policy expires option unchecked

CAn EPM admin can create an authorization token for each application needed by running: EPMOPAGtool.exe -command gentoken -targetUser <username> -filehash <file hash> -timeLimit 120 -action run

DAn EPM admin can create a secure token for the end user's computer and instruct the end user to open an administrative command prompt and run the command vfagent.exe -UseToken <securetoken_value>

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AAn EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to 120 hours

BAn EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to 120 hours and Terminate administrative processes when the policy expires option unchecked

CAn EPM admin can create an authorization token for each application needed by running: EPMOPAGtool.exe -command gentoken -targetUser <username> -filehash <file hash> -timeLimit 120 -action run

DAn EPM admin can create a secure token for the end user's computer and instruct the end user to open an administrative command prompt and run the command vfagent.exe -UseToken <securetoken_value>

Question 3

After a clean installation of the EPM agent, the local administrator password is not being changed on macOS and the old password can still be used to log in.

What is a possible cause?

ASecure Token on macOS endpoint is not enabled.

BEPM agent is not able to connect to the EPM server.

CAfter installation, Full Disk Access for the macOS agent to support EPM policies was not approved.

DEndpoint password policy is too restrictive.

Correct : A

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

ASecure Token on macOS endpoint is not enabled.

BEPM agent is not able to connect to the EPM server.

CAfter installation, Full Disk Access for the macOS agent to support EPM policies was not approved.

DEndpoint password policy is too restrictive.

Question 4

If you want to diagnose agent EPM agent connectivity issues, what is the agent executable that can be used from the command line?

Avf_agent.exe

Bepm_agent.exe

Cvault_agent.exe

Ddb_agent.exe

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

Avf_agent.exe

Bepm_agent.exe

Cvault_agent.exe

Ddb_agent.exe

Question 5

What is required to configure SAML authentication on EPM?

AOAuth token

BSigned Authentication Request

CEncrypted Assertion

DSigned SAML Response

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AOAuth token

BSigned Authentication Request

CEncrypted Assertion

DSigned SAML Response

Curious about Actual CyberArk Defender (EPM-DEF) Exam Questions?

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: