最新的VMware Carbon Black Cloud Endpoint Standard Skills - 5V0-93.22免費考試真題
問題1
An administrator is investigating an alert and reads a summary that says:
The application powershell.exe was leveraged to make a potentially malicious network connection.
Which action should the administrator take immediately to block that connection?
The application powershell.exe was leveraged to make a potentially malicious network connection.
Which action should the administrator take immediately to block that connection?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題2
An organization has the following requirements for allowing application.exe:
Must not work for any user's D:\ drive
Must allow running only from inside of the user's Temp\Allowed directory Must not allow running from anywhere outside of Temp\Allowed For example, on one user's machine, the path is C:\Users\Lorie\Temp\Allowed\application.exe.
Which path meets this criteria using wildcards?
Must not work for any user's D:\ drive
Must allow running only from inside of the user's Temp\Allowed directory Must not allow running from anywhere outside of Temp\Allowed For example, on one user's machine, the path is C:\Users\Lorie\Temp\Allowed\application.exe.
Which path meets this criteria using wildcards?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題3
An administrator wants to find information about real-world prevention rules that can be used in VMware Carbon Black Cloud Endpoint Standard.
How can the administrator obtain this information?
How can the administrator obtain this information?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題4
The administrator has configured a permission rule with the following options selected:
Application at path: C:\Users\*\Downloads\**
Operation Attempt: Performs any operation
Action: Bypass
What is the impact, if any, of using the wildcards in the path for this rule?
Application at path: C:\Users\*\Downloads\**
Operation Attempt: Performs any operation
Action: Bypass
What is the impact, if any, of using the wildcards in the path for this rule?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題5
An administrator has just placed an endpoint into bypass.
What type of protection, if any, will VMware Carbon Black provide this device?
What type of protection, if any, will VMware Carbon Black provide this device?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題6
A company wants to prevent an executable from running in their organization. The current reputation for the file is NOT LISTED, and the machines are in the default standard policy.
Which action should be taken to prevent the file from executing?
Which action should be taken to prevent the file from executing?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題7
Is it possible to search for unsigned files in the console?
正確答案: A
說明：（僅 VCESoft 成員可見）
