Exam EPM-DEF topic 1 question 104 discussion

Actual exam question from CyberArk's EPM-DEF

Question #: 104
Topic #: 1

For some reason, a few machines were disconnected from the console and are having problems connecting to the console. Now, the Intune team is trying to uninstall agents, but self-defense is enabled on these machines.

What is the best way to uninstall the EPM agents under these circumstances?

A. Turn off self-defense, then the Intune team can uninstall the agent
B. Generate a secure token for all computers and use it for this machine.
C. Generate a secure token for any of the alive machines and use it for this machine.
D. Turn off self-defense for this specific machine by creating a custom configuration, so the Intune team can uninstall the agent.

Show Suggested Answer

Suggested Answer: A 🗳️

by Kamiles at Aug. 21, 2025, 3:49 a.m.

Comments

Submit Cancel

xXChrisXx

1 week, 3 days ago

Selected Answer: B

The best way to uninstall the EPM agents when self-defense is enabled and the machines are having problems connecting to the console is: B. Generate a secure token for all computers and use it for this machine. Explanation: When agent self-defense is enabled, a secure token must be provided to uninstall the EPM agent. This token is generated by the EPM administrator in the management console and is unique to the set of computers or can be generated for all computers. The Intune team can then use this secure token to uninstall the agent on affected machines, even if they are disconnected from the console. Turning off self-defense directly or creating custom configurations to disable self-defense on individual machines is not the standard or recommended approach. The token-based uninstall process is designed to allow secure removal without disabling protections.

upvoted 1 times

...