CyberArk Defender - EPM 認定 EPM-DEF 試験問題:

1. CyberArk's Privilege Threat Protection policies are available for which Operating Systems? (Choose two.)

A) Windows Workstations
B) Windows Servers
C) Linux
D) MacOS

2. What are valid policy options for JIT and elevation policies?

A) Grant temporary access for all users, Policy name, Restart administrative processes in admin approval mode, Collect audit information
B) Grant temporary access for, Policy name, Terminate administrative processes when the policy expires, Collect audit information
C) Terminate administrative services, Grant policy access for, Policy name, Collect audit reports
D) Grant administrative access, Policy name, Log off to apply policy, Collect policy violation information

3. Which EPM reporting tool provides a comprehensive view of threat detection activity?

A) McAfee ePO Reports
B) Threat Detection Dashboard
C) Detected Threats
D) Threat Detection Events

4. How does CyberArk EPM's Ransomware Protection feature monitor for Ransomware Attacks?

A) It compares known ransomware signatures retrieved from virus databases.
B) It performs a lookup of file signatures against VirusTotal's database.
C) It monitors for any unauthorized access to specified files.
D) It sandboxes the suspected ransomware and applies heuristics.

5. An EPM Administrator would like to enable a Threat Protection policy, however, the policy protects an application that is not installed on all endpoints.
What should the EPM Administrator do?

A) Enable the Threat Protection policy and configure the Policy Targets.
B) Do not enable the Threat Protection policy.
C) Split up the endpoints in to separate Sets and enable Threat Protection for only one of the Sets.
D) Enable the Threat Protection policy only in Detect mode.

質問と回答：