ExamGecko
Login
Home / VMware / 5V0-93.22 / List of questions
Ask Question

VMware 5V0-93.22 Practice Test - Questions Answers, Page 3

Add to Whishlist

List of questions

Question 21

Report Export Collapse

A user downloaded and executed malware on a system. The malware is actively exfiltrating data.

Which immediate action is recommended to prevent further exfiltration?

Become a Premium Member for full access
  Unlock Premium Member

Question 22

Report Export Collapse

What are the highest and lowest file reputation priorities, respectively, in VMware Carbon Black Cloud?

Become a Premium Member for full access
  Unlock Premium Member

Question 23

Report Export Collapse

An administrator wants to find information about real-world prevention rules that can be used in VMware Carbon Black Cloud Endpoint Standard.

How can the administrator obtain this information?

Become a Premium Member for full access
  Unlock Premium Member

Question 24

Report Export Collapse

Is it possible to search for unsigned files in the console?

Become a Premium Member for full access
  Unlock Premium Member

Question 25

Report Export Collapse

The administrator has configured a permission rule with the following options selected:

Application at path: C:\Program Files\**

Operation Attempt: Performs any operation

Action: Bypass

What is the impact, if any, of using the wildcards in the application at path field?

Become a Premium Member for full access
  Unlock Premium Member

Question 26

Report Export Collapse

A script-based attack has been identified that inflicted damage to the corporate systems. The security administrator found out that the malware was coded into Excel VBA and would like to perform a search to further inspect the incident.

Where in the VMware Carbon Black Cloud Endpoint Standard console can this action be completed?

Become a Premium Member for full access
  Unlock Premium Member

Question 27

Report Export Collapse

An administrator would like to proactively know that something may get blocked when putting a policy rule in the environment.

How can this information be obtained?

Become a Premium Member for full access
  Unlock Premium Member

Question 28

Report Export Collapse

An administrator has just placed an endpoint into bypass.

What type of protection, if any, will VMware Carbon Black provide this device?

Become a Premium Member for full access
  Unlock Premium Member

Question 29

Report Export Collapse

A security administrator needs to review the Live Response activities and commands that have been executed while performing a remediation process to the sensors.

Where can the administrator view this information in the console?

Become a Premium Member for full access
  Unlock Premium Member

Question 30

Report Export Collapse

Which statement accurately characterizes Alerts that are categorized as a 'Threat' versus those categorized as 'Observed'?

Become a Premium Member for full access
  Unlock Premium Member
Total 60 questions
Go to page: of 6
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

An administrator wants to block an application by its path instead of reputation. The following steps have already been taken: Go to Enforce > Policies > Select the desired policy > Which additional steps must be taken to complete the task?
Is it possible to search for unsigned files in the console?
A user downloaded and executed malware on a system. The malware is actively exfiltrating data. Which immediate action is recommended to prevent further exfiltration?
An administrator has determined that the following rule was the cause for an unexpected block: [Suspected malware] [Invokes a command interpreter] [Terminate process] All reputations for the process which was blocked show SUSPECT_MALWARE. Which reputation was used by the sensor for the decision to terminate the process?
The use of leading wildcards in a query is not recommended unless absolutely necessary because they carry a significant performance penalty for the search. What is an example of a leading wildcard?
An administrator would like to proactively know that something may get blocked when putting a policy rule in the environment. How can this information be obtained?
A security administrator is tasked to investigate an alert about a suspicious running process trying to modify a system registry. Which components can be checked to further inspect the cause of the alert?
A security administrator notices an unusual software behavior on an endpoint. The administrator immediately used the search query to collect data and start analyzing indicators to find the solution. What is a pre-requisite step in gathering specific vulnerability data to export it as a CSV file for analysis?
An administrator wants to prevent a spreadsheet from being misused to run malicious code, while minimizing the risk of breaking normal operations of a spreadsheet. Which rule should be used?
An administrator wants to prevent ransomware that has not been seen before, without blocking other processes. Which rule should be used?