VMware 5V0-91.20 Exam
VMware Carbon Black Portfolio Skills (Page 3 )

Updated On: 7-Feb-2026

An administrator is concerned that someone may be using unauthorized commands from cmd.exe. These commands are not considered suspicious or malicious, and there is no policy based around them.
Which page should the administrator use to find these commands?

  1. Sensor Management
  2. Investigate
  3. Policies
  4. Alerts

Answer(s): A



An analyst has investigated multiple alerts on a number of HR workstations and found that java.exe is attempting to PowerShell. Of the Windows workstations in question, the analyst has also found that Java is installed in multiple locations. The analyst needs to block java.exe from this type of operation.
Which rule meets this need?

  1. **/java.exe --> Invokes an untrusted process --> Terminate process
  2. **/Program Files/*/java.exe--> Invokes an untrusted process --> Deny operation
  3. **\Program Files\*\java.exe --> Invokes a command interpreter --> Terminate process
  4. **\java.exe --> Invokes a command interpreter --> Deny operation

Answer(s): C



Review the following query:
path:c:\program\ files\ \(x86\)\microsoft
How would this query input term be interpreted?

  1. c:\program files x86\microsoft
  2. c:rogram files (x86)icrosoft
  3. c:rogramfilesx86icrosoft
  4. c:\program files (x86)\microsoft

Answer(s): D



Which statement filters data to only return rows where the publisher of the software includes VMware anywhere in the name?

  1. WHERE publisher = "%VMware%"
  2. WHERE publisher = "%VMware"
  3. WHERE publisher LIKE "VMware%"
  4. WHERE publisher LIKE "%VMware%"

Answer(s): D



An administrator ran the following query.
SELECT name, VERSION, install_location, install_source, publisher, install_date, uninstall_string FROM programs WHERE publisher = "Microsoft Corporation"; The administrator notices a lot of installed programs are not returned. How can the administrator alter the query to see all results?

  1. Edit the WHERE clause to remove the quotes
  2. Remove the WHERE clause
  3. Replace the = with LIKE
  4. Change the WHERE clause to = "*"

Answer(s): A






Post your Comments and Discuss VMware 5V0-91.20 exam prep with other Community members:

Join the 5V0-91.20 Discussion