CyberArk Defender – Endpoint Privilege Manager — Question 71

For some reason, a few machines were disconnected from the console and are having problems connecting to the console. Now, the Intune team is trying to uninstall agents, but self-defense is enabled on these machines.

What is the best way to uninstall the EPM agents under these circumstances?

Answer options

• A. Turn off self-defense, then the Intune team can uninstall the agent
• B. Generate a secure token for all computers and use it for this machine.
• C. Generate a secure token for any of the alive machines and use it for this machine.
• D. Turn off self-defense for this specific machine by creating a custom configuration, so the Intune team can uninstall the agent.

Correct answer: B

Explanation

The correct answer is B because generating a secure token for all computers allows for broader access and control over the machines, enabling the uninstallation process. Options A and D suggest disabling self-defense, which might not be permissible or secure. Option C, while somewhat useful, does not provide the same level of assurance and control as option B.