Free 5V0-91.20 Exam Braindumps
VMware Carbon Black Portfolio Skills Questions 36–40 (page: 9)

Updated On: 9-Feb-2026

Level 3 service desk personnel have been approved to modify computer enforcement levels by security governance.
Which set of steps is required to implement this change?

  1. Assign permission "Temporary assign computers" to each user.
  2. Create new user role, assign permission "Manage computers" to role.
  3. Create new user role, map AD group to role, assign permission "Manage computers" to role.
  4. Create new user role, map AD group to role, assign permission "Temporary assign computers" to role.

Answer(s): A



An Enterprise EDR administrator sees the process in the graphic on the Investigate page but does not see an alert for this process:
How can the administrator generate an alert for future hits against this watchlist?

  1. select the watchlist on the watchlists page, select the Scheduled Task Created report, and use Take Action to select Alert on hit for the report.
  2. Select the watchlist on the watchlists page, select the Scheduled Task Created report, and use Take Action to toggle Alert on hit to On.
  3. Select the watchlist on the watchlists page and click on Alerts: Off to toggle the alerts to On.
  4. Select the watchlist on the watchlists page, use Take Action to select Edit, and select Alert on hit.

Answer(s): D



What are the three available methods in VMware Carbon Black App Control by which an endpoint (agent) can be assigned to a specific policy? (Choose three.)

  1. By pushing the designated GPO script
  2. Via DASCLI command
  3. By installing the agent via SCCM
  4. Manual policy assignment
  5. By branded/policy-specific installer
  6. By Active Directory Mapping

Answer(s): C,D,F



Review the following EDR query:
parent_name:outlook.exe AND -alliance_score_srstrust:* AND -digsig_result: "Signed' Which process would show in the query results?

  1. Processes invoked by outlook.exe that have an SRS Trust value and that are digitally signed.
  2. Processes invoking outlook.exe that do not have an SRS Trust value and that are not digitally signed.
  3. Processes invoked by outlook.exe that do not have an SRS Trust value and that are not digitally signed.
  4. Processes invoking outlook.exe that have an SRS Trust value and that are not digitally signed.

Answer(s): D



Review the following EDR query:
(parent_name:powershell.exe OR parent_name:cmd.exe) AND netconn_count:[l TO *] Which process would show in the query results?

  1. Processes invoked by Powershell.exe and cmd.exe with a single network connection event
  2. Processes invoking Powershell.exe and cmd.exe with multiple network connection events
  3. Processes invoked by Powershell.exe or cmd.exe with any number of network connection events
  4. Processes invoking Powershell.exe or cmd.exe with multiple network connection events

Answer(s): A



Viewing page 9 of 25
Viewing questions 41 - 45 out of 116 questions


Post your Comments and Discuss VMware 5V0-91.20 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!