CyberArk Exam EPM-DEF Topic 3 Question 37 Discussion

Actual exam question for CyberArk's EPM-DEF exam

Question #: 37
Topic #: 3

[All EPM-DEF Questions]

An application has been identified by the LSASS Credentials Harvesting Module.

What is the recommended approach to excluding the application?

AIn Agent Configurations, add the application to the Threat Protection Exclusions

BAdd the application to the Files to be Ignored Always in Agent Configurations.

CExclude the application within the LSASS Credentials Harvesting module.

DAdd the application to an Advanced Policy or Application Group with an Elevate policy action.

Show Suggested Answer

Suggested Answer: C

by Leonida at Sep 19, 2024, 08:39 AM

Limited Time Offer

25%

Off

Get Premium EPM-DEF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jerrod

5 days ago

B) Add the application to the Files to be Ignored Always in Agent Configurations? Nah, that's not gonna work. Might as well just throw the whole computer out the window!

upvoted 0 times

...

Antonette

13 days ago

A) In Agent Configurations, add the application to the Threat Protection Exclusions? That's the way to go! Easy peasy lemon squeezy.

upvoted 0 times

...

Dorian

19 days ago

But wouldn't adding the application to an Advanced Policy or Application Group with an Elevate policy action be a better option?

upvoted 0 times

...

Hoa

22 days ago

I disagree, I believe we should add the application to the Threat Protection Exclusions in Agent Configurations.

upvoted 0 times

...

Dorian

23 days ago

I think the recommended approach is to exclude the application in the LSASS Credentials Harvesting module.

upvoted 0 times

...