EPM-DEF: CyberArk Defender EPM CertificationDemo

By CyberArk · Question Mode

QuestionQ18

Ransomware Protection

How does CyberArk EPM’s Ransomware Protection feature monitor for ransomware attacks?

  • A It compares known ransomware signatures retrieved from virus databases.
  • B It sandboxes the suspected ransomware and applies heuristics.
  • C It monitors for any unauthorized access to specified files.
  • D It performs a lookup of file signatures against VirusTotal's database.
Explanation

CyberArk EPM provides ransomware protection by restricting and monitoring data access by unknown or unauthorized applications. Monitoring unauthorized access to protected files detects the file-access behavior associated with ransomware encryption, without relying on known malware signatures, sandboxing, or VirusTotal lookups.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!