Exam EPM-DEF topic 1 question 39 discussion

Actual exam question from CyberArk's EPM-DEF

Question #: 39
Topic #: 1

A particular user in company ABC requires the ability to run any application with administrative privileges every day that they log in to their systems for a total duration of 5 working days.
What is the correct solution that an EPM admin can implement?

A. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to 120 hours
B. An EPM admin can generate a JIT access and elevation policy with temporary access timeframe set to 120 hours and Terminate administrative processes when the policy expires option unchecked
C. An EPM admin can create an authorization token for each application needed by running: EPMOPAGtool.exe -command gentoken -targetUser <username> -filehash <file hash> -timeLimit 120 -action run
D. An EPM admin can create a secure token for the end user's computer and instruct the end user to open an administrative command prompt and run the command vfagent.exe -UseToken <securetoken_value>

Show Suggested Answer

Suggested Answer: B 🗳️

by Souvik0730 at Dec. 18, 2023, 2:23 p.m.

Comments

Submit Cancel

Takumi

9 months, 2 weeks ago

Selected Answer: A

The answer could be A because in B is mentioned: Terminate administrative processes when the policy expires option unchecked. If you want to terminate administrative processes the option has to be checked.

upvoted 1 times

...

ZippyZulu

9 months, 3 weeks ago

Looks like the maximum temporary access length according to the CA docs is between 1h and 72hrs. https://docs.cyberark.com/epm/latest/en/Content/Policies/JITElevationAdmin-NewUI.htm#CreateaJITpolicy

upvoted 2 times

...

Souvik0730

1 year ago

A is correct because as JIT we can create in Application advance policy, not user JIT policy with a time frame of 120 HRS

upvoted 3 times

...