Home

Home / VMware / 5V0-93.22

Question list

List of questions

Question 1

(0)

Which permission level is required when a user wants to install a sensor on a Windows endpoint?

Question 2

(0)

The administrator has configured a permission rule with the following options selected: Application at path: C:\Users\*\Downloads\** Operation Attempt: Performs any operation Action: Bypass What

Question 3

(0)

Which VMware Carbon Black Cloud process is responsible for uploading event reporting to VMware Carbon Black Cloud?

Question 4

(0)

An administrator wants to prevent malicious code that has not been seen before from retrieving credentials from the Local Security Authority Subsystem Service, without causing otherwise good applica

Question 5

(0)

An administrator wants to prevent a spreadsheet from being misused to run malicious code, while minimizing the risk of breaking normal operations of a spreadsheet. Which rule should be used?

Question 6

(0)

An administrator has determined that the following rule was the cause for an unexpected block: [Suspected malware] [Invokes a command interpreter] [Terminate process] All reputations for the proce

Question 7

(0)

What is a capability of VMware Carbon Black Cloud?

Question 8

(0)

A security administrator needs to remediate a security vulnerability that may affect the sensors. The administrator decides to use a tool that can provide interaction and remote access for further i

Question 9

(0)

A security administrator notices an unusual software behavior on an endpoint. The administrator immediately used the search query to collect data and start analyzing indicators to find the solution.

Question 10

(0)

A VMware Carbon Black managed endpoint is showing up as an inactive device in the console. What is the threshold, in days, before a machine shows as inactive?

Open VPLUS File

Convert VPLUS to PDF

Related questions

An administrator wants to block an application by its path instead of reputation. The following steps have already been taken: Go to Enforce > Policies > Select the desired policy > Which additional steps must be taken to complete the task?

A user downloaded and executed malware on a system. The malware is actively exfiltrating data. Which immediate action is recommended to prevent further exfiltration?

A security administrator is tasked to investigate an alert about a suspicious running process trying to modify a system registry. Which components can be checked to further inspect the cause of the alert?

Where can a user identify whether a sensor's signature pack is out-of-date in VMware Carbon Black Cloud?

An administrator has determined that the following rule was the cause for an unexpected block: [Suspected malware] [Invokes a command interpreter] [Terminate process] All reputations for the process which was blocked show SUSPECT_MALWARE. Which reputation was used by the sensor for the decision to terminate the process?

The use of leading wildcards in a query is not recommended unless absolutely necessary because they carry a significant performance penalty for the search. What is an example of a leading wildcard?

Is it possible to search for unsigned files in the console?

An administrator wants to prevent ransomware that has not been seen before, without blocking other processes. Which rule should be used?

An administrator needs to add an application to the Approved List in the VMware Carbon Black Cloud console. Which two different methods may be used for this purpose? (Choose two.)

What are the highest and lowest file reputation priorities, respectively, in VMware Carbon Black Cloud?

Question 20 - 5V0-93.22 discussion

Report

Which command is used to immediately terminate a current Live Response session?

A.

kill

B.

detach -q

C.

delete

D.

execfg

Show Answer

asked 16/09/2024

waleed Haridi

34 questions

User

Your answer: A B C D

0 comments

Sorted by

Leave a comment first