CyberArk Defender - EPM - EPM-DEF Exam Practice Test

A. It compares known ransomware signatures retrieved from virus databases.

B. It sandboxes the suspected ransomware and applies heuristics.

C. It performs a lookup of file signatures against VirusTotal's database.

D. It monitors for any unauthorized access to specified files.

A. AD Users and Groups, Computers in AD Security Groups, Servers

B. Computers in this set, Computers in AD Security Groups, Users and Groups

C. OS Computers, EPM Sets, AD Users

D. EPM Sets, Computers in AD Security Groups, AD Users and AD Security Groups

A. Policy Audit

B. Policies

C. Threat Protection Inbox

D. Threat Intelligence

A. Threat Protection policies requires an additional agent to be installed.

B. Certain Threat Protection policies apply for specific applications not found on all machines

C. Threat Protection features are not available in all regions.

D. Some Threat Protection policies are applicable only for Windows Servers as opposed to Workstations.

A. The username should have a strong password associated.

B. The username should match to an existing account.

C. The username should not match to an existing account.

D. The username should match the built-in local Administrator.

A. Privilege Management, Application Control, Threat analysis

B. Privilege Management, Threat Protection, Application Escalation Control

C. Privilege Management, Privilege Threat Protection, Local Privileged Accounts Management

D. Privilege Escalation, Privilege Management, Application Management

A. The Users defined in the advanced policy do not include the end user running the application.

B. The Advanced: Time options are not set correctly to include the time that the user is running the application at.

C. The Specify permissions to be set for selected Services on End-user Computers is set to Allow Start/Stop

D. The Elevate Child Processes option is not enabled.