Question No : 1
Which user or group will not be removed as part of CyberArk EPM's Remove Local Administrators feature?

• A.Built-in Local Administrator
• B.Domain Users
• C.Admin Users
• D.Power Users

Show Answers

Answer:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM/21.9/en/Content/EPM/Server%20User%20Guide/ManageLocalAdmin istrators.htm

Question No : 2
When deploying Ransomware Protection, what tasks should be considered before enabling this functionality? (Choose two.)

• A.Add trusted software to the Authorized Applications (Ransomware protection) Application Group
• B.Add trusted software to the Allow Application Group
• C.Add additional files, folders, and/or file extensions to be included to Ransomware Protection
• D.Enable Detect privileged unhandled applications under Default Policies

Show Answers

Answer:

Question No : 3
Before enabling Ransomware Protection, what should the EPM Administrator do first?

• A.Enable the Privilege Management Inbox in Elevate mode.
• B.Enable the Control Applications Downloaded From The Internet feature in Restrict mode.
• C.Review the Authorized Applications (Ransomware Protection) group and update if necessary.
• D.Enable Threat Protection and Threat Intelligence modules.

Show Answers

Answer:

Question No : 4
What EPM component is responsible for communicating password changes in credential rotation?

• A.EPM Agent
• B.EPM Server
• C.EPM API
• D.EPM Discovery

Show Answers

Answer:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM/Latest/en/Content/Policies/CredentialsRotation-NewUI.htm

Question No : 5
Which EPM reporting tool provides a comprehensive view of threat detection activity?

• A.Threat Detection Dashboard
• B.Detected Threats
• C.Threat Detection Events
• D.McAfee ePO Reports

Show Answers

Answer:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM-onprem/Latest/en/Content/EPM/Server%20User%20Guide/Reporting%20Capabilities.htm#:~:text=The%20Threat%20Detection%20Dashboard%20provides,select%20Reports%20% 3E%20Threat%20Detection%20Dashboard

Question No : 6
Where can you view CyberArk EPM Credential Lures events?

• A.Application Catalog
• B.Threat Protection Inbox
• C.Events Management
• D.Policy Audit

Show Answers

Answer:
Explanation:
Reference: https://docs.cyberark.com/Product-Doc/OnlineHelp/EPM/21.7/en/Content/EPM/Server%20User%20Guide/Threat%20Detection%20Events.htm#:~:text=View%20events&text=You%20can%20filter%20the%20list,event %20and%20display%20more%20details

Question No : 7
In EPM, creation of which user type is required to use SAML?

• A.Local CyberArk EPM User
• B.AD User
• C.SQL User
• D.Azure AD User

Show Answers

Answer:

Question No : 8
After a clean installation of the EPM agent, the local administrator password is not being changed on macOS and the old password can still be used to log in.
What is a possible cause?

• A.Secure Token on macOS endpoint is not enabled.
• B.EPM agent is not able to connect to the EPM server.
• C.After installation, Full Disk Access for the macOS agent to support EPM policies was not approved.
• D.Endpoint password policy is too restrictive.

Show Answers

Answer:

Question No : 9
When adding the EPM agent to a pre-existing security stack on workstation, what two steps are CyberArk recommendations. (Choose two.)

• A.Add any pre-existing security application to the Files to Be Ignored Always.
• B.Add EPM agent to the other security tools exclusions.
• C.EPM agent should never be run with any other security tools.
• D.Create new advanced policies for each security tool.

Show Answers

Answer:

Question No : 10
When working with credential rotation/loosely connected devices, what additional CyberArk components are required?

• A.PTA
• B.PVWA
• C.DAP

Show Answers

Answer: