5V0-91.20試験無料問題集（115題）「VMware Carbon Black Portfolio Skills 認定」

出題：1

What is the maximum number of binaries (hashes) that can be banned using the web console?

A. 300

B. 600

C. 500

D. 400

正解：A 解答を投票する

出題：2

An analyst navigates to the alerts page in Endpoint Standard and sees the following:

What does the yellow color represent on the left side of the row?

A. It is a threat alert and warrants immediate investigation.

B. It is a dismissed alert within the user interface.

C. It is an observed alert and may indicate suspicious behavior.

D. It is an alert from a watchlist rather than the analytics engine.

正解：D 解答を投票する

出題：3

A process has created a number of interesting (executable) files in one sequence.
In addition to the event Subtype 'New Unapproved File to Computer', what other event subtype is likely to be associated with this sequence?

A. File Group Created

B. File Upload Completed

C. File Properties Modified

D. New File Discovered on Startup

正解：D 解答を投票する

出題：4

Review this result after executing a query in the Process Search page, noting the circled black dot:

What is the meaning of the black dot shown under Tags?

A. The execution of the process resulted in watchlist hits.

B. The events for the process were also sent to the Syslog Server.

C. The execution of the process resulted in feed hits.

D. The events for the process were tagged in an investigation.

正解：C 解答を投票する

出題：5

An Enterprise EDR administrator sees the process in the graphic on the Investigate page but does not see an alert for this process:

How can the administrator generate an alert for future hits against this watchlist?

A. Select the watchlist on the watchlists page, use Take Action to select Edit, and select Alert on hit.

B. select the watchlist on the watchlists page, select the Scheduled Task Created report, and use Take Action to select Alert on hit for the report.

C. Select the watchlist on the watchlists page and click on Alerts: Off to toggle the alerts to On.

D. Select the watchlist on the watchlists page, select the Scheduled Task Created report, and use Take Action to toggle Alert on hit to On.

正解：A 解答を投票する

出題：6

A watchlist generates a false positive on the Triage Alerts page, so the watchlist must be updated.
How should this task be accomplished?

A. Open the process analysis page and select the Add Watchlist Exclusion option from the Actions menu.

B. One can update watchlists directly on the Triage Alerts Page using the pencil icon.

C. Open the Watchlist Page and click the pencil button associated with the watchlist.

D. One can update watchlists from the Process Search Page.

正解：B 解答を投票する

5V0-91.20試験無料問題集「VMware Carbon Black Portfolio Skills 認定」