VMware 5V0-93.22 Exam Questions

Question 6 of 60

What are the highest and lowest file reputation priorities, respectively, in VMware Carbon Black Cloud?

Priority 1: Ignore, Priority 11: Unknown

Priority 1: Unknown, Priority 11: Ignore

Priority 1: Known Malware, Priority 11: Common White

Priority 1: Company Allowed, Priority 11: Not Listed/Adaptive White

Correct Answer: A

Question 7 of 60

An administrator wants to find information about real-world prevention rules that can be used in VMware Carbon Black Cloud Endpoint Standard.
How can the administrator obtain this information?

Refer to an external report from other security vendors to obtain solutions.

Refer to the TAU-TIN's on the VMware Carbon Black community page.

Refer to the VMware Carbon Black Cloud sensor install guide.

Refer to VMware Carbon Black Cloud user guide.

Correct Answer: B

Question 8 of 60

Is it possible to search for unsigned files in the console?

Yes, by using the search:
NOT process_publisher_state:FILE_SIGNATURE_STATE_SIGNED

No, it is not possible to return a query for unsigned files.

Yes, by using the search:
process_publisher_state:FILE_SIGNATURE_STATE_UNSIGNED

Yes, by looking at signed and unsigned executables in the environment and seeing if another difference can be found, thus locating unsigned files in the environment.

Correct Answer: C

Question 9 of 60

The administrator has configured a permission rule with the following options selected:
Application at path: C:\Program Files\**
Operation Attempt: Performs any operation

Action: Bypass -
What is the impact, if any, of using the wildcards in the application at path field?

Executable files in the "Program Files" directory and subdirectories will be ignored.

Executable files in the "Program Files" directory will be blocked.

Executable files in the "Program Files" directory will be logged.

Executable files in the "Program Files" directory will be subject to blocking rules.

Correct Answer: A

Question 10 of 60

A script-based attack has been identified that inflicted damage to the corporate systems. The security administrator found out that the malware was coded into Excel VBA and would like to perform a search to further inspect the incident.
Where in the VMware Carbon Black Cloud Endpoint Standard console can this action be completed?

Endpoints

Settings

Investigate

Alerts

Correct Answer: C