CyberArk Exam EPM-DEF Topic 3 Question 37 Discussion

Actual exam question for CyberArk's EPM-DEF exam

Question #: 37
Topic #: 3

[All EPM-DEF Questions]

An application has been identified by the LSASS Credentials Harvesting Module.

What is the recommended approach to excluding the application?

AIn Agent Configurations, add the application to the Threat Protection Exclusions

BAdd the application to the Files to be Ignored Always in Agent Configurations.

CExclude the application within the LSASS Credentials Harvesting module.

DAdd the application to an Advanced Policy or Application Group with an Elevate policy action.

Show Suggested Answer

Suggested Answer: C

by Leonida at Sep 19, 2024, 08:39 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

5 days ago

A) In Agent Configurations, add the application to the Threat Protection Exclusions? That's the way to go! Easy peasy lemon squeezy.

upvoted 0 times

...

10 days ago

But wouldn't adding the application to an Advanced Policy or Application Group with an Elevate policy action be a better option?

upvoted 0 times

...

13 days ago

I disagree, I believe we should add the application to the Threat Protection Exclusions in Agent Configurations.

upvoted 0 times

...

15 days ago

I think the recommended approach is to exclude the application in the LSASS Credentials Harvesting module.

upvoted 0 times

...