1 / 12

VMware Carbon Black EndPoint Protection 2021 5V0-91.20 Exam Dumps

Passcert new updated VMware Carbon Black EndPoint Protection 2021 5V0-91.20 Exam Dumps to help you understand the real exam objectives and practice real questions and answers.

carrorsstephen
Download Presentation

VMware Carbon Black EndPoint Protection 2021 5V0-91.20 Exam Dumps

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. 5V0-91.20 Sample Test 5V0-91.20 Sample Test VMware Carbon Black Portfolio Skills VMware Carbon Black Portfolio Skills https://www.passcert.com/5V0-91.20.html https://www.passcert.com/5V0-91.20.html

  2. Download Passcert latest 5V0-91.20 Sample Test to help you pass successfully Question 1 An administrator wants to query the status of the firewall for all endpoints. The administrator will query the registry key found here HKEY_LOCAL_MACHINE\SYSTE M\CurrentControlSet\Services\SharedAccess\Parameter s\FirewallPolicy \StandardProfile. To make the results easier to understand, the administrator wants to return either enabled or disabled for the results, rather than the value from the registry key. Which SQL statement will rewrite the output based on a specific result set returned from the system? A. CASE B. AS C. ALTER D. SELECT Answer: A 02 03 04

  3. Download Passcert latest 5V0-91.20 Sample Test to help you pass successfully Question 2 An administrator runs multiple queries on tables and combines the results after the fact to correlate data. The administrator needs to combine rows from multiple tables based on data from a related column in each table. Which SQL statement should be used to achieve this goal? A. JOIN B. WHERE C. AS D. COMBINE Answer: A 01 02 03 04

  4. Download Passcert latest 5V0-91.20 Sample Test to help you pass successfully Question 3 01 An administrator wants to allow files to run from a network share. Which rule type should the administrator configure? A. Execute Prompt (Shared Path) B. Trusted Path C. Network Execute (Allow) D. Write Approve (Network) Answer: A 02 03 04

  5. Download Passcert latest 5V0-91.20 Sample Test to help you pass successfully Question 4 What are the three available methods in VMware Carbon Black App Control by which an endpoint (agent) can be assigned to a specific policy? (Choose three.) A. By pushing the designated GPO script B. Via DASCLI command C. By installing the agent via SCCM D. Manual policy assignment E. By branded/policy-specific installer F. By Active Directory Mapping Answer: C,D,F 01 02 03 04

  6. Download Passcert latest 5V0-91.20 Sample Test to help you pass successfully Question 5 Which Live Query statement is properly constructed? A. SELECT * FROM 'users' B. select * from *: C. select from users; D. SELECT * FROM users; Answer: D 01 02 03 04

  7. Download Passcert latest 5V0-91.20 Sample Test to help you pass successfully Question 6 An administrator has configured a policy to run a standard background scan. How long does this one-time scan take to complete on endpoints assigned to that policy? A. 180 days B. 30 days C. 3-5 days D. 1 day Answer: B 01 02 03 04

  8. Download Passcert latest 5V0-91.20 Sample Test to help you pass successfully Question 7 01 An analyst is investigating an alert within the Enterprise EDR console and needs to take action on it. Which three actions are available to take on the alert? (Choose three.) A. Ignore alert B. Dismiss C. Dismiss on all devices if grouping is enabled D. Edit watchlist E. Save report F. Notifications history Answer: B,C,E 02 03 04

  9. Download Passcert latest 5V0-91.20 Sample Test to help you pass successfully Question 8 01 An administrator is searching for any child processes of email clients with this query in Carbon Black Enterprise EDR: parent_name:outlook.exe OR parent_name:thunderbird.exe OR parent_name:eudora.exe The administrator would like to modify this query to only show child processes that do not have a known reputation in the Carbon Black Cloud. Which search field can be added to the query to show the desired results? A. process_integrity_level B. process_reputation C. process_privileges D. process_cloud_reputation Answer: B 02 03 04

  10. Download Passcert latest 5V0-91.20 Sample Test to help you pass successfully Question 9 01 Review this EDR query: childproc_name:whoami.exe AND childproc_name:hostname.exe AND childproc_name:tasklist.exe AND childproc_name:ipconfig.exe Which process would show in the query results? A. Any process invoked by whoami.exe, hostname.exe, tasklist.exe, and ipconfig.exe B. Any process invoked by whoami.exe, hostname.exe, tasklist.exe, or ipconfig.exe C. Any process invoking whoami.exe, hostname.exe, tasklist.exe, or ipconfig.exe D. Any process invoking whoami.exe, hostname.exe, tasklist.exe, and ipconfig.exe Answer: D 02 03 04

  11. Download Passcert latest 5V0-91.20 Sample Test to help you pass successfully Question 10 An analyst is reviewing an alert in Enterprise EDR from a custom watchlist. The analyst disagrees with the alert severity rating. How can the analyst change the alert severity value, if this is possible? A. The alert severity is assigned by the backend analytics. B. The alert severity is not configurable. C. Change the alert severity on the watchlist. D. Change the alert severity on the report. Answer: C 01 02 03 04

  12. Thank you More Information, you can visit Passcert.com

More Related