5V0-93.22 Exam Questions and Answers

QUESTION: 1

An administrator has been tasked with preventing the use of unauthorized USB storage devices from being used in the environment.
Which item needs to be enabled in order to enforce this requirement?

Enable the Block access to all unapproved USB devices within the policies option.
Choose to disable USB device access on each endpoint from the Inventory page.
Select the option to block USB devices from the Reputation page.
Elect to approve only allowed USB devices from the USB Devices page.

Answer(s): A

Reveal Solution Next Question

QUESTION: 2

An administrator needs to create a search, but it must exclude "system.exe".
How should this task be completed?

#process_name:system.exe
*process_name:system.exe
<process_name:system.exe>
-process_name:system.exe

Answer(s): D

Reveal Solution Next Question

QUESTION: 3

An administrator needs to use an ID to search and investigate security incidents in Carbon Black Cloud.
Which three IDs may be used for this purpose? (Choose three.)

Threat
Hash
Sensor
Event
User
Alert

Answer(s): B,D,F

Reveal Solution Next Question

QUESTION: 4

Which VMware Carbon Black Cloud integration is supported for SIEM?

SolarWinds
LogRhythm
Splunk App
Datadog

Answer(s): C

Reveal Solution Next Question

QUESTION: 5

What connectivity is required for VMware Carbon Black Cloud Endpoint Standard to perform Sensor Certificate Validation?

TCP/443 to GoDaddy OCSP and CRL URLs (crl.godaddy.com and ocsp.godaddy.com)
TCP/80 to GoDaddy OCSP and CRL URLs (crl.godaddy.com and ocsp.godaddy.com)
TCP/443 to GoDaddy CRL URL (crl.godaddy.com and ocsp.godaddy.com)
TCP/80 to GoDaddy CRL URL (crl.godaddy.com and ocsp.godaddy.com)

Answer(s): A

Reveal Solution Next Question

An administrator wants to block an application by its path instead of reputation. The following steps have already been taken:
Go to Enforce > Policies > Select the desired policy > Which additional steps must be taken to complete the task?

Click Enforce > Add application path name
Scroll down to the Permissions section > Click Add application path > Enter the path of the desired application
Scroll down to the Blocking and Isolation section > Click Edit (pencil icon) for the desired Reputation
Scroll down to the Blocking and Isolation section > Click Add application path > Enter the path of the desired application

Answer(s): D

Reveal Solution Next Question

QUESTION: 7

An administrator is investigating an alert and reads a summary that says:

The application powershell.exe was leveraged to make a potentially malicious network connection.
Which action should the administrator take immediately to block that connection?

Click Delete Application
Click Quarantine Asset
Click Export Alert
Click Drop Connection

Answer(s): D

Reveal Solution Next Question

QUESTION: 8

Which command is used to immediately terminate a current Live Response session?

kill
detach -q
delete
execfg

Answer(s): B

Reveal Solution Next Question

VMware 5V0-93.22 Exam (page: 1)
VMware Carbon Black Cloud Endpoint Standard Skills
Updated on: 12-Feb-2026

Access free 5V0-93.22 actual exam questions, answers, explanations and user discussions.

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

QUESTION: 6

QUESTION: 7

QUESTION: 8

VMware 5V0-93.22 Exam (page: 1) VMware Carbon Black Cloud Endpoint Standard Skills Updated on: 12-Feb-2026

Access free 5V0-93.22 actual exam questions, answers, explanations and user discussions.

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

QUESTION: 5

QUESTION: 6

QUESTION: 7

QUESTION: 8

VMware 5V0-93.22 Exam (page: 1)
VMware Carbon Black Cloud Endpoint Standard Skills
Updated on: 12-Feb-2026