Exit demo 5V0-91.20 VMware Carbon Black Portfolio Skills PDF format · free preview

VMware 5V0-91.20 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/5v0-9120.html

Question 1
Single choice

An administrator wants to query the status of the firewall for all endpoints. The administrator will query the
registry key found here

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameter s
\FirewallPolicy\StandardProfile.

To make the results easier to understand, the administrator wants to return either enabled or disabled for the results, rather than the value from the registry key.

Which SQL statement will rewrite the output based on a specific result set returned from the system?

A.

CASE

B.

AS

C.

ALTER

D.

SELECT

Question 2
Single choice

An analyst navigates to the alerts page in Endpoint Standard and sees the following:

What does the yellow color represent on the left side of the row?

A.

It is an alert from a watchlist rather than the analytics engine.

B.

It is a threat alert and warrants immediate investigation.

C.

It is an observed alert and may indicate suspicious behavior.

D.

It is a dismissed alert within the user interface.

Question 3
Single choice

An Enterprise EDR administrator sees the process in the graphic on the Investigate page but does not see an alert for this process:

How can the administrator generate an alert for future hits against this watchlist?

A.

select the watchlist on the watchlists page, select the Scheduled Task Created report, and use Take

Action to select Alert on hit for the report.

B.

Select the watchlist on the watchlists page, select the Scheduled Task Created report, and use Take

Action to toggle Alert on hit to On.

C.

Select the watchlist on the watchlists page and click on Alerts: Off to toggle the alerts to On.

D.

Select the watchlist on the watchlists page, use Take Action to select Edit, and select Alert on hit.

Question 4
Single choice

An administrator runs multiple queries on tables and combines the results after the fact to correlate data.
The administrator needs to combine rows from multiple tables based on data from a related column in each table.

Which SQL statement should be used to achieve this goal?

A.

JOIN

B.

WHERE

C.

AS

D.

COMBINE

Question 5
Single choice

An administrator wants to allow files to run from a network share.

Which rule type should the administrator configure?

A.

Execute Prompt (Shared Path)

B.

Trusted Path

C.

Network Execute (Allow)

D.

Write Approve (Network)

Question 6
Multiple choice

What are the three available methods in VMware Carbon Black App Control by which an endpoint (agent) can be assigned to a specific policy? (Choose three.)

A.

By pushing the designated GPO script

B.

Via DASCLI command

C.

By installing the agent via SCCM

D.

Manual policy assignment

E.

By branded/policy-specific installer

F.

By Active Directory Mapping

Question 7
Single choice

Which Live Query statement is properly constructed?

A.

SELECT * FROM 'users'

B.

select * from *:

C.

select from users;

D.

SELECT * FROM users;

Question 8
Single choice

An administrator has configured a policy to run a standard background scan.

How long does this one-time scan take to complete on endpoints assigned to that policy?

A.

180 days

B.

30 days

C.

3-5 days

D.

1 day

Question 9
Multiple choice

An analyst is investigating an alert within the Enterprise EDR console and needs to take action on it.

Which three actions are available to take on the alert? (Choose three.)

A.

Ignore alert

B.

Dismiss

C.

Dismiss on all devices if grouping is enabled

D.

Edit watchlist

E.

Save report

F.

Notifications history

Question 10
Single choice

Review this EDR query:

childproc_name:whoami.exe AND childproc_name:hostname.exe AND childproc_name:tasklist.exe AND
childproc_name:ipconfig.exe

Which process would show in the query results?

A.

Any process invoked by whoami.exe, hostname.exe, tasklist.exe, and ipconfig.exe

B.

Any process invoked by whoami.exe, hostname.exe, tasklist.exe, or ipconfig.exe

C.

Any process invoking whoami.exe, hostname.exe, tasklist.exe, or ipconfig.exe

D.

Any process invoking whoami.exe, hostname.exe, tasklist.exe, and ipconfig.exe

Showing 10 of 116 questions · Unlock the full set