VMware 5V0-91.20 VMware Carbon Black Portfolio Skills Exam Practice Test

Review the following search:

childproc_name:''rundll32.exe'' AND -digsig_result:''Signed'' AND path:c:\windows\*

What is this search looking for?

A company wants to implement the strictest security controls for computers on which the software seldom

changes (i.e., servers or single-purpose systems).

Which Enforcement Level is the most fitting?

This search is entered into the process search page: notepad.exe

Which three statements about this query are true? (Choose three.)

Carbon Black App Control maintains an inventory of all interesting (executable) files on endpoints where the agent is installed.

What is the initial inventory procedure called, and how can this process be triggered?

A security policy states to enable Live Response by default across the enterprise. However, the team identified critical systems which should not support Live Response due to risk. The team needs to disable Live Response on selected systems.

From which page can this goal be accomplished?

Which Sensor Status under Endpoint Health indicates that a system's policy enforcement is disabled, and the sensor is not sending security event data to the cloud?

In which two ways can the tamper protection on an App Control agent be disabled when diagnosing agent

issues or removing the agent? (Choose two.)