5V0-93.22 by VMware Actual Free Exam Questions And Answers

Question 1

Is it possible to search for unsigned files in the console?

A. Yes, by using the search:
NOT process_publisher_state:FILE_SIGNATURE_STATE_SIGNED

B. Yes, by looking at signed and unsigned executables in the environment and seeing if another difference can be found, thus locating unsigned files in the environment.

C. Yes, by using the search:
process_publisher_state:FILE_SIGNATURE_STATE_UNSIGNED

D. No, it is not possible to return a query for unsigned files.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

An administrator needs to find all events on the Investigate page where the process is svchost.exe, and the path is not the standard path of C:\Windows\System32.
Which advanced search will yield these results?

A. process_name:svchost.exe EXCLUDE process_name:C:\Windows\System32

B. process_name:svchost.exe AND NOT process_name:C\:\\Windows\\System32

C. process_name:svchost.exe EXCLUDE process_name:C\:\\Windows\\System32

D. process_name:svchost.exe AND NOT process_name:C:\Windows\System32

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

A security administrator needs to remediate a security vulnerability that may affect the sensors. The administrator decides to use a tool that can provide interaction and remote access for further investigation.
Which tool is being used by the administrator?

A. PowerCLI

B. CBLauncher

C. Live Response

D. IRepCLI

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

An administrator wants to block ransomware in the organization based on leadership's growing concern about ransomware attacks in their industry.
What is the most effective way to meet this goal?

A. Recognize that analytics will automatically block the attacks that may occur.

B. Start in the monitored policy until it is clear that no attacks are happening.

C. Look at current attacks to see if the software that is running is vulnerable to potential ransomware attacks.

D. Turn on the performs ransomware-like behavior rule in the policies.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

An administrator is working in a development environment that has a policy rule applied and notices that there are too many blocks. The administrator takes action on the policy rule to troubleshoot the issue until the blocks are fixed.
Which action should the administrator take?

A. Unenforce

B. Disable

C. Recall

D. Delete

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

A security administrator needs to remediate a security vulnerability that may affect the sensors. The administrator decides to use a tool that can provide interaction and remote access for further investigation.
Which tool is being used by the administrator?

A. PowerCLI

B. CBLauncher

C. Live Response

D. IRepCLI

Discussion 0

Correct Answer: C Vote an answer

Question 7

An administrator needs to create a search, but it must exclude "system.exe".
How should this task be completed?

A. *process_name:system.exe

B. <process_name:system.exe>

C. -process_name:system.exe

D. #process_name:system.exe

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

VMware Carbon Black Cloud Endpoint Standard Skills - 5V0-93.22 Exam Practice Test

Contact Us

Useful Links

Latest Updated