Free 5V0-91.20 Exam braindumps download (5V0-91.20 exam dumps Free)

QUESTION: 41

An administrator viewed and filtered the results of a completed query within the User Interface for Audit and Remediation. The administrator exported the results to create charts and other visuals for reporting.
When viewing the exported results, the administrator noticed some results were missing from the data set.
Why did the administrator not have the full data set from the query?

Export applies to the data visible in the UI; filtering will impact the viewable data.
Export pulls all results; the query must not have covered all data required.
Export is limited to the first hundred rows, and the query had more rows than supported.
Export was used prior to the query completing, and some data is missing.

Answer(s): D

Show Answer Next Question

QUESTION: 42

An analyst is investigating an alert within Enterprise EDR on the process analysis page. The process tree can be seen below:

Which statement accurately characterizes this situation?

Conhost.exe has one or more child processes.
The solid line between the nodes denotes a process was injected into by another process.
Several nodes in this process tree have watchlist hits.
The analyst navigated to this process analysis page from the wscrlpt.exe process.

Answer(s): B

Show Answer Next Question

QUESTION: 43

When dismissing alerts, when should an administrator select "If alert occurs in the future, automatically dismiss it from all devices"?

When the administrator wishes to mark the alert instance as a false positive
When the administrator wishes to be notified again to this behavior
When the administrator wishes to apply this action to all future alerts from the device
When the administrator wishes to remove the alert

Answer(s): C

Show Answer Next Question

QUESTION: 44

Which value should an administrator use when reviewing an alert to determine the file reputation at the time the event occurred?

Cloud Reputation (Initial)
Effective Reputation
Local Reputation
Cloud Reputation (Current)

Answer(s): A

Show Answer Next Question

QUESTION: 45

There is a requirement to block ransomware when a sensor is offline.
Which blocking and isolation rule fulfills this requirement?

Known Malware --> Performs ransomware-like behavior --> Terminate process
Not Listed Application --> Performs ransomware-like behavior --> Deny operation
Suspect Malware --> Performs ransomware-like behavior --> Deny operation
Unknown Application --> Performs ransomware-like behavior --> Terminate process

Answer(s): A

Show Answer Next Question

Free 5V0-91.20 Exam Braindumps VMware Carbon Black Portfolio Skills Questions 41–45 (page: 10)

QUESTION: 41

QUESTION: 42

QUESTION: 43

QUESTION: 44

QUESTION: 45

Free 5V0-91.20 Exam Braindumps
VMware Carbon Black Portfolio Skills Questions 41–45 (page: 10)