EPM-DEF Sample Questions Answers

AD Users and Groups, Computers in AD Security Groups, Servers

Computers in this set, Computers in AD Security Groups, Users and Groups

OS Computers, EPM Sets, AD Users

EPM Sets, Computers in AD Security Groups, AD Users and AD Security Groups

Enable the Threat Protection policy and configure the Policy Targets.

Do not enable the Threat Protection policy.

Enable the Threat Protection policy only in Detect mode.

Split up the endpoints in to separate Sets and enable Threat Protection for only one of the Sets.

In the Default Policies, exclude either the Windows Servers or the Windows Desktops.

Create Advanced Policies to apply different policies between Windows Servers and Windows Desktops.

CyberArk does not recommend installing EPM Agents on Windows Servers.

Create a separate Set for Windows Servers and Windows Desktops.

Privilege Threat Protection under Policies.

Authorized Applications under Application Groups.

Protect Against Ransomware under Default Policies.

Threat Protection under Agent Configurations.

In Agent Configurations, add the application to the Threat Protection Exclusions

Add the application to the Files to be Ignored Always in Agent Configurations.

Exclude the application within the LSASS Credentials Harvesting module.

Add the application to an Advanced Policy or Application Group with an Elevate policy action.

OAuth token

Signed Authentication Request

Encrypted Assertion

Signed SAML Response