CyberArk Defender - EPM - EPM-DEF Exam Questions [2026]

QUESTION NO: 1
CyberArk's Privilege Threat Protection policies are available for which Operating Systems? (Choose two.)

A. Windows Servers B. MacOS C. Windows Workstations D. Linux

Correct Answer: A,C

QUESTION NO: 2
How does CyberArk EPM's Ransomware Protection feature monitor for Ransomware Attacks?

A. It sandboxes the suspected ransomware and applies heuristics. B. It monitors for any unauthorized access to specified files. C. It compares known ransomware signatures retrieved from virus databases. D. It performs a lookup of file signatures against VirusTotal's database.

Correct Answer: A

QUESTION NO: 3
What is the CyberArk recommended practice when deploying the EPM agent to non-persistent VDIs?

A. A separate set B. a VDI advanced policy C. A separate computer group D. a separate license

Correct Answer: C

QUESTION NO: 4
An EPM Administrator would like to enable a Threat Protection policy, however, the policy protects an application that is not installed on all endpoints.
What should the EPM Administrator do?

A. Split up the endpoints in to separate Sets and enable Threat Protection for only one of the Sets. B. Do not enable the Threat Protection policy. C. Enable the Threat Protection policy only in Detect mode. D. Enable the Threat Protection policy and configure the Policy Targets.

Correct Answer: A

QUESTION NO: 5
Which user or group will not be removed as part of CyberArk EPM's Remove Local Administrators feature?

A. Domain Users B. Admin Users C. Power Users D. Built-in Local Administrator

Correct Answer: D

QUESTION NO: 6
How does EPM help streamline security compliance and reporting?

A. Provides reports in standard formats such as PDF, Word and Excel B. Use of automated distribution of reports to the security team C. Create custom reports D. Print reports

Correct Answer: A

QUESTION NO: 7
Which of the following application options can be used when defining trusted sources?

A. Publisher, Name, Size, URI B. Product, URL, Machine, Package C. Product, Publisher, User/Group, Installation Package D. Publisher, Product, Size, URL

Correct Answer: C