VMware Carbon Black Cloud Endpoint Standard Skills - 5V0-93.22 模擬練習
An administrator needs to add an application to the Approved List in the VMware Carbon Black Cloud console.
Which two different methods may be used for this purpose? (Choose two.)
Which two different methods may be used for this purpose? (Choose two.)
正解: A,D
解説: (PassTest メンバーにのみ表示されます)
An administrator needs to use an ID to search and investigate security incidents in Carbon Black Cloud.
Which three IDs may be used for this purpose? (Choose three.)
Which three IDs may be used for this purpose? (Choose three.)
正解: B,C,F
解説: (PassTest メンバーにのみ表示されます)
A VMware Carbon Black managed endpoint is showing up as an inactive device in the console.
What is the threshold, in days, before a machine shows as inactive?
What is the threshold, in days, before a machine shows as inactive?
正解: B
解説: (PassTest メンバーにのみ表示されます)
An administrator has dismissed a group of alerts and ticked the box for "Dismiss future instances of this alert on all devices in all policies". There is also a Notification configured to email the administrator whenever an alert of the same Severity occurs. The following day, a new alert is added to the same group of alerts.
How will this alert be handled?
How will this alert be handled?
正解: D
解説: (PassTest メンバーにのみ表示されます)
An administrator is investigating an alert and reads a summary that says:
The application powershell.exe was leveraged to make a potentially malicious network connection.
Which action should the administrator take immediately to block that connection?
The application powershell.exe was leveraged to make a potentially malicious network connection.
Which action should the administrator take immediately to block that connection?
正解: C
解説: (PassTest メンバーにのみ表示されます)
Which permission level is required when a user wants to install a sensor on a Windows endpoint?
正解: D
解説: (PassTest メンバーにのみ表示されます)
An administrator has configured a permission rule with the following options selected:
Application at path: C:\Program Files\**
Operation Attempt: Performs any operation
Action: Bypass
What is the impact, if any, of using the wildcards in the path?
Application at path: C:\Program Files\**
Operation Attempt: Performs any operation
Action: Bypass
What is the impact, if any, of using the wildcards in the path?
正解: C
解説: (PassTest メンバーにのみ表示されます)