CyberArk Exam EPM-DEF Topic 1 Question 29 Discussion

Actual exam question for CyberArk's EPM-DEF exam

Question #: 29
Topic #: 1

[All EPM-DEF Questions]

How does CyberArk EPM's Ransomware Protection feature monitor for Ransomware Attacks?

AIt compares known ransomware signatures retrieved from virus databases.

BIt sandboxes the suspected ransomware and applies heuristics.

CIt monitors for any unauthorized access to specified files.

DIt performs a lookup of file signatures against VirusTotal's database.

Show Suggested Answer

Suggested Answer: B

by Rolande at Jun 20, 2024, 05:08 PM

Limited Time Offer

25%

Off

Get Premium EPM-DEF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rodrigo

7 months ago

I think D) It performs a lookup of file signatures against VirusTotal's database could also be a valid approach to detect ransomware.

upvoted 0 times

...

Markus

7 months ago

I believe it could also be C) It monitors for any unauthorized access to specified files, as that can be a sign of ransomware activity.

upvoted 0 times

...

Ciara

7 months ago

I agree with Kristofer, sandboxing and applying heuristics is a common method for detecting ransomware.

upvoted 0 times

...

Douglass

7 months ago

B is the way to go, no doubt. Sandboxing is the cybersecurity equivalent of putting your computer in time-out until it promises to behave.

upvoted 0 times

Sheron

6 months ago

Claudio: It's important to have multiple layers of defense in place.

upvoted 0 times

...

Lisandra

6 months ago

It's a proactive approach to protect against ransomware attacks.

upvoted 0 times

...

Claudio

7 months ago

Definitely, it's like isolating the threat and analyzing its behavior.

upvoted 0 times

...

Graciela

7 months ago

I agree, sandboxing is a great way to handle suspected ransomware.

upvoted 0 times

...

Celestine

7 months ago

I'm stumped, this is a tough one. Maybe I should ask the cybersecurity wizard in my office for help. They always have the answers, even if they're a little snarky about it.

upvoted 0 times

...

Melvin

8 months ago

D is what I would go with. VirusTotal is a well-known database for checking file signatures against known malware.

upvoted 0 times

Mignon

7 months ago

I agree, VirusTotal is a reliable source for checking file signatures.

upvoted 0 times

...

Mignon

7 months ago

D is what I would go with. VirusTotal is a well-known database for checking file signatures against known malware.

upvoted 0 times

...

Kristofer

8 months ago

I think the answer is B) It sandboxes the suspected ransomware and applies heuristics.

upvoted 0 times

...

Salome

8 months ago

Hmm, I'm not sure. C sounds like a good option too, monitoring for unauthorized access to sensitive files could be a way to detect ransomware.

upvoted 0 times

Kimberlie

7 months ago

B) It sandboxes the suspected ransomware and applies heuristics.

upvoted 0 times

...

Luisa

7 months ago

A) It compares known ransomware signatures retrieved from virus databases.

upvoted 0 times

...

Katheryn

8 months ago

I think B is the correct answer. Sandboxing and applying heuristics is a common way to detect and analyze unknown threats like ransomware.

upvoted 0 times

Denny

7 months ago

I'm not sure, but A and D also sound like they could be effective in detecting ransomware.

upvoted 0 times

...

Beatriz

7 months ago

I think C could also be a good option, monitoring for unauthorized access is crucial in detecting ransomware attacks.

upvoted 0 times

...

Casie

7 months ago

I agree, B sounds like the most effective way to detect ransomware.

upvoted 0 times

...