Free 5V0-91.20 Exam Braindumps
VMware Carbon Black Portfolio Skills Questions 31–35 (page: 8)

Updated On: 9-Feb-2026

Which ID in Endpoint Standard is associated with one specific action, involves up to three different hashes (Parent, Process, Target), and occurs on a single device at a specific time?

  1. Threat ID
  2. Process ID
  3. Alert ID
  4. Event ID

Answer(s): D



An analyst is investigating an alert within Enterprise EDR. The alert is tied to an unusual process name.
When navigating to the binary details page, for the binary used in the alert, the analyst sees the following:
The analyst wants to find any instances of this process executing regardless of the process name used.
Which two details from the binary can be used to search for the application regardless of the seen name? (Choose two.)

  1. The binary's hash
  2. The path
  3. The original filename
  4. The product version
  5. The publisher name

Answer(s): B,D



An authorized administrator plans to remove the App Control agent from a computer.
Which Enforcement Level must a computer be in before the agent can be uninstalled?

  1. Visibility
  2. None (Disabled)
  3. Any Enforcement Level
  4. Low Enforcement

Answer(s): C



A Carbon Black Cloud Endpoint Standard analyst is testing different search operator combinations.
Which two queries produce the same result? (Choose two.)

  1. process_name:chrome.exe OR NOT netconn_domain:google.com
  2. process_name:chrome.exe OR netconn_domain:google.com
  3. process_name:chrome.exe AND NOT netconn_domain:google.com
  4. process_name:chrome.exe netconn_domain:google.com
  5. process_narne:chrome.exe NOT netconn_domain:google.com

Answer(s): A,E



Which reputation has the highest priority in Cloud Endpoint Standard?

  1. Unknown
  2. Adware/PUP Malware
  3. Known Malware
  4. Ignore

Answer(s): C



Viewing page 8 of 25
Viewing questions 36 - 40 out of 116 questions


Post your Comments and Discuss VMware 5V0-91.20 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!