VMware 5V0-93.22 Dumps in PDF and Online - Page: 4

QUESTION: 9

A user downloaded and executed malware on a system. The malware is actively exfiltrating data.

Which immediate action is recommended to prevent further exfiltration?

Check Security Advisories and Threat Research contents.
Place the device in quarantine.
Run a background scan.
Request upload of the file for analysis.

Answer(s): B

Reveal Solution Next Question

QUESTION: 10

What are the highest and lowest file reputation priorities, respectively, in VMware Carbon Black Cloud?

Priority 1: Ignore, Priority 11: Unknown
Priority 1: Unknown, Priority 11: Ignore
Priority 1: Known Malware, Priority 11: Common White
Priority 1: Company Allowed, Priority 11: Not Listed/Adaptive White

Answer(s): A

Reveal Solution Next Question

QUESTION: 11

An administrator wants to find information about real-world prevention rules that can be used in VMware Carbon Black Cloud Endpoint Standard.
How can the administrator obtain this information?

Refer to an external report from other security vendors to obtain solutions.
Refer to the TAU-TIN's on the VMware Carbon Black community page.
Refer to the VMware Carbon Black Cloud sensor install guide.
Refer to VMware Carbon Black Cloud user guide.

Answer(s): B

Reveal Solution Next Question

QUESTION: 12

Is it possible to search for unsigned files in the console?

Yes, by using the search:
NOT process_publisher_state:FILE_SIGNATURE_STATE_SIGNED
No, it is not possible to return a query for unsigned files.
Yes, by using the search:
process_publisher_state:FILE_SIGNATURE_STATE_UNSIGNED
Yes, by looking at signed and unsigned executables in the environment and seeing if another difference can be found, thus locating unsigned files in the environment.

Answer(s): C

Reveal Solution Next Question

The administrator has configured a permission rule with the following options selected:
Application at path: C:\Program Files\**
Operation Attempt: Performs any operation
Action: Bypass
What is the impact, if any, of using the wildcards in the application at path field?

Executable files in the "Program Files" directory and subdirectories will be ignored.
Executable files in the "Program Files" directory will be blocked.
Executable files in the "Program Files" directory will be logged.
Executable files in the "Program Files" directory will be subject to blocking rules.

Answer(s): A

Reveal Solution Next Question

QUESTION: 14

A script-based attack has been identified that inflicted damage to the corporate systems. The security administrator found out that the malware was coded into Excel VBA and would like to perform a search to further inspect the incident.
Where in the VMware Carbon Black Cloud Endpoint Standard console can this action be completed?

Endpoints
Settings
Investigate
Alerts

Answer(s): C

Reveal Solution Next Question

QUESTION: 15

An administrator would like to proactively know that something may get blocked when putting a policy rule in the environment.
How can this information be obtained?

Search the data using the test rule functionality.
B Examine log files to see what would be impacted
Put the rules in and see what happens to the endpoints.
D Determine what would happen based on previously used antivirus software

Answer(s): A

Reveal Solution Next Question

QUESTION: 16

An administrator has just placed an endpoint into bypass.
What type of protection, if any, will VMware Carbon Black provide this device?

VMware Carbon Black will be uninstalled from the endpoint.
VMware Carbon Black will place the machine in quarantine.
VMware Carbon Black will not provide any protection to the endpoint.
VMware Carbon Black will apply policy rules.

Answer(s): C

Reveal Solution Next Question

VMware Carbon Black Cloud Endpoint Standard Skills 5V0-93.22 Dumps in PDF

Free VMware 5V0-93.22 Real Questions (page: 4)

QUESTION: 9

QUESTION: 10

QUESTION: 11

QUESTION: 12

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16