QUESTION: 29

Why would a sensor have a status of "Inactive"?

The sensor has not checked in within the last 30 days.
The sensor has been uninstalled from the endpoint for more than 30 days.
The device has been put in bypass for the last 30 days.
The sensor has been in disabled mode for more than 30 days.

Answer(s): A

Reveal Solution Next Question

QUESTION: 30

Which statement is true when searching through the EDR server UI?

The backslash \ is the character to escape characters.
Whitespaces between search terms imply the OR operator.
The percent symbol % is the character to represent a wildcard.
The exclamation point ! is the character to represent negation.

Answer(s): C

Reveal Solution Next Question

QUESTION: 31

Which ID in Endpoint Standard is associated with one specific action, involves up to three different hashes (Parent, Process, Target), and occurs on a single device at a specific time?

Threat ID
Process ID
Alert ID
Event ID

Answer(s): D

Reveal Solution Next Question

An analyst is investigating an alert within Enterprise EDR. The alert is tied to an unusual process name.
When navigating to the binary details page, for the binary used in the alert, the analyst sees the following:
The analyst wants to find any instances of this process executing regardless of the process name used.
Which two details from the binary can be used to search for the application regardless of the seen name? (Choose two.)

The binary's hash
The path
The original filename
The product version
The publisher name

Answer(s): B,D

Reveal Solution Next Question

Free 5V0-91.20 Exam Braindumps (page: 8)

QUESTION: 29

QUESTION: 30

QUESTION: 31

QUESTION: 32