VMware 5V0-91.20 Exam Questions Instant Access

Question 1

An administrator ran the following query.

SELECT name, VERSION, install_location, install_source, publisher, install_date, uninstall_string FROM programs WHERE publisher = "Microsoft Corporation";

The administrator notices a lot of installed programs are not returned.

How can the administrator alter the query to see all results?

AEdit the WHERE clause to remove the quotes

BRemove the WHERE clause

CReplace the = with LIKE

DChange the WHERE clause to = '*'

Answer : A

Question 2

When dismissing alerts, when should an administrator select "If alert occurs in the future, automatically dismiss it from all devices"?

AWhen the administrator wishes to mark the alert instance as a false positive

BWhen the administrator wishes to be notified again to this behavior

CWhen the administrator wishes to apply this action to all future alerts from the device

DWhen the administrator wishes to remove the alert

Answer : C

Question 3

A Carbon Black Cloud analyst needs to identify the Internet Explorer extensions installed on Windows

endpoints.

Which Live Query statement will successfully query these items?

ASELECT * FROM registry JOIN ie_extensions;

BSELECT * FROM registry WHERE ie_extensions;

CSELECT * FROM ie_extensions;

DSELECT * FROM ie_extensions WHERE enabled=true;

Answer : A

Question 4

An Endpoint Standard administrator finds a binary in the environment and decides to manually add the file hash to the Banned List.

Which reputation does the file now have?

ASuspect/Heuristic Malware

BCompany Black

CAdware/PUP Malware

DKnown Malware

Answer : A

Question 5

Which identifier is shared by all events when an alert is investigated?

AProcess ID

BEvent ID

CPriority Score

DAlert ID

Answer : B

Question 6

There is a requirement to block ransomware when a sensor is offline.

Which blocking and isolation rule fulfills this requirement?

AKnown Malware ---> Performs ransomware-like behavior ---> Terminate process

BNot Listed Application ---> Performs ransomware-like behavior ---> Deny operation

CSuspect Malware ---> Performs ransomware-like behavior ---> Deny operation

DUnknown Application ---> Performs ransomware-like behavior ---> Terminate process

Answer : A

Question 7

An administrator wants to find instances where the binary Is unsigned.

Which term will accomplish this search?

ANOT process_publisher:FILE_SIGNATURE_STATE_SIGNED

BNOT process_publisher_state:FILE_SIGNATURE_STATE_SIGNED

Cprocess_publisher_state:FILE_SIGNATURE_STATE_NOT_SIGNED

Dprocess_publisher:FILE_SIGNATURE_STATE_NOT_SIGNED

Answer : B

VMware Carbon Black Portfolio Skills 5V0-91.20 Exam Questions