Nest 0 Cart
Nest Account
Popular Exams
All Categories...
Nest
Nest 0
Contact
Log In / Sign Up
Copyright 2024 © store. All rights reserved.
Home VMware 5V0-93.22

VMware 5V0-93.22 Exam Practice Questions (P. 4)

  • Full Access (60 questions)
  • Six months of Premium Access
  • Access to one million comments
  • Seamless ChatGPT Integration
  • Ability to download PDF files
  • Anki Flashcard files for revision
  • No Captcha & No AdSense
  • Advanced Exam Configuration
Get Contributor Access
Question #16
An administrator has just placed an endpoint into bypass.
What type of protection, if any, will VMware Carbon Black provide this device?
  1. A
    VMware Carbon Black will be uninstalled from the endpoint.
  2. B
    VMware Carbon Black will place the machine in quarantine.
  3. C
    VMware Carbon Black will not provide any protection to the endpoint.
  4. D
    VMware Carbon Black will apply policy rules.

Correct Answer:
C

Question #17
A security administrator needs to review the Live Response activities and commands that have been executed while performing a remediation process to the sensors.
Where can the administrator view this information in the console?
  1. A
    Users
  2. B
    Audit Log
  3. C
    Notifications
  4. D
    Inbox

Correct Answer:
B

Question #18
Which statement accurately characterizes Alerts that are categorized as a "Threat" versus those categorized as "Observed"?
  1. A
    "Threat" indicates an ongoing attack, "Observed" indicates the attack is over and is being watched.
  2. B
    "Threat" indicates a more likely malicious event, "Observed" are less likely to be malicious.
  3. C
    "Threat" indicates a block (Deny or Terminate) has occurred, "Observed" indicates that there is no block.
  4. D
    "Threat" indicates that no block (Deny or Terminate) has occurred, "Observed" indicates a block.

Correct Answer:
B

Question #19
An administrator is working in a development environment that has a policy rule applied and notices that there are too many blocks. The administrator takes action on the policy rule to troubleshoot the issue until the blocks are fixed.
Which action should the administrator take?
  1. A
    Unenforce
  2. B
    Disable
  3. C
    Recall
  4. D
    Delete

Correct Answer:
B

Question #20
An organization has the following requirements for allowing application.exe:
Must not work for any user's D:\ drive
Must allow running only from inside of the user's Temp\Allowed directory
Must not allow running from anywhere outside of Temp\Allowed
For example, on one user's machine, the path is C:\Users\Lorie\Temp\Allowed\application.exe.
Which path meets this criteria using wildcards?
  1. A
    C:\Users\?\Temp\Allowed\application.exe
  2. B
    C:\Users\*\Temp\Allowed\application.exe
  3. C
    *:\Users\**\Temp\Allowed\application.exe
  4. D
    *:\Users\*\Temp\Allowed\application.exe

Correct Answer:
B

Previous Questions Next Questions

All Pages