Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

VMware 5V0-91.20 Exam Questions

Status: RETIRED
Exam Name: VMware Carbon Black Portfolio Skills
Exam Code: 5V0-91.20
Related Certification(s): VMware Carbon Black EndPoint Protection Certification
Certification Provider: VMware
Number of 5V0-91.20 practice questions in our database: 116 (updated: 28-07-2022)
Expected 5V0-91.20 Exam Topics, as suggested by VMware :
  • Topic 1: Given a scenario about App Control user accounts with privileges, identify how they should be assigned
  • Topic 2: Indentify the characteristics of enforcement levels in App Control
  • Topic 3: Indentify the components, the event type, or the meaning of the event
  • Topic 4: Indentify the EDR components and dataflows
  • Topic 5: Indentify the characteristic of a binary search and banning binaries in EDR
  • Topic 6: Indentify the communication process and requirements for Sensor to server comms in Endpoint
  • Topic 7: Indentify the components of the watchlist in Cloud Enterprise EDR
  • Topic 8: Indentify how to perfome basic queries with OSQuery in Cloud Audit and Remendiation
  • Topic 9: Indentify the framework or structure of the query in Cloud Audit and Remediation
  • Topic 10: Indentify Cloud Audit Live Response capabalities, limitations, and features
Disscuss VMware 5V0-91.20 Topics, Questions or Ask Anything Related

Currently there are no comments in this discussion, be the first to comment!

Free VMware 5V0-91.20 Exam Actual Questions

Note: Premium Questions for 5V0-91.20 were last updated On 28-07-2022 (see below)

Question #1

App Control System Health email alerts for excessive agent backlog are occurring hourly. This is

overwhelming the analysts, and they would like to reduce the notifications.

How can the analyst reduce the unneeded alerts?

Reveal Solution Hide Solution
Correct Answer: B

Question #2

An analyst wants to block an application's specific behavior but does not want to kill the process entirely as it is heavily used on workstations. The analyst needs to use a Blocking and Isolation Action to ensure that the process is kept alive while blocking further unwanted activity.

Which Blocking and Isolation Action should the analyst use to accomplish this goal?

Reveal Solution Hide Solution
Correct Answer: B

Question #3

An administrator wants to query the status of the firewall for all endpoints. The administrator will query the

registry key found here

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy

\StandardProfile.

To make the results easier to understand, the administrator wants to return either enabled or disabled for the results, rather than the value from the registry key.

Which SQL statement will rewrite the output based on a specific result set returned from the system?

Reveal Solution Hide Solution
Correct Answer: A

Question #4

Refer to the exhibit:

Which two logic statements correctly explain filtering within the UI? (Choose two.)

Reveal Solution Hide Solution
Correct Answer: A, D

Question #5

Which action is only available for the ''Performs any operation'' and ''Performs any API Operation'' operation attempts?

Reveal Solution Hide Solution
Correct Answer: A

sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwjClN7SwoXvAhViqnEKHbXpChUQFjAAegQIARAD&

url=https%3A%2F%2Fcommunity.carbonblack.com%2Fgbouw27325%2Fattachments%2Fgbouw27325%

2Fproduct-docs-news%2F1413%2F3%2Fcbd-userguide.pdf&usg=AOvVaw1CU0_RmjfwbwAh68IuEKAd

(90)


Unlock Premium 5V0-91.20 Exam Questions with Advanced Practice Test Features:
  • Select Question Types you want
  • Set your Desired Pass Percentage
  • Allocate Time (Hours : Minutes)
  • Create Multiple Practice tests with Limited Questions
  • Customer Support
Get Full Access Now

Save Cancel
az-700  pass4success  az-104  200-301  200-201  cissp  350-401  350-201  350-501  350-601  350-801  350-901  az-720  az-305  pl-300  

Warning: Cannot modify header information - headers already sent by (output started at /pass.php:70) in /pass.php on line 77