VMware 5V0-93.22 Quiz 1 Topic 1 Questions 1-5

Question: 1

An administrator wants to block ransomware in the organization based on leadership's growing concern about ransomware attacks in their industry.

What is the most effective way to meet this goal?

ALook at current attacks to see if the software that is running is vulnerable to potential ransomware attacks.

BTurn on the performs ransomware-like behavior rule in the policies.

CRecognize that analytics will automatically block the attacks that may occur.

DStart in the monitored policy until it is clear that no attacks are happening.

Show Answer

Question: 2

An administrator needs to find all events on the Investigate page where the process is svchost.exe, and the path is not the standard path of C:\Windows\System32.

Which advanced search will yield these results?

Aprocess_name:svchost.exe EXCLUDE process_name:C\:\\Windows\\System32

Bprocess_name:svchost.exe AND NOT process_name:C:\Windows\System32

Cprocess_name:svchost.exe AND NOT process_name:C\:\\Windows\\System32

Dprocess_name:svchost.exe EXCLUDE process_name:C:\Windows\System32

Show Answer

Question: 3

An organization has the following requirements for allowing application.exe:

For example, on one user's machine, the path is C:\Users\Lorie\Temp\Allowed\application.exe.

Which path meets this criteria using wildcards?

AC:\Users\?\Temp\Allowed\application.exe

BC:\Users\*\Temp\Allowed\application.exe

C*:\Users\**\Temp\Allowed\application.exe

D*:\Users\*\Temp\Allowed\application.exe

Show Answer

Question: 4

An administrator has just placed an endpoint into bypass.

What type of protection, if any, will VMware Carbon Black provide this device?

AVMware Carbon Black will be uninstalled from the endpoint.

BVMware Carbon Black will place the machine in quarantine.

CVMware Carbon Black will not provide any protection to the endpoint.

DVMware Carbon Black will apply policy rules.

Show Answer

Question: 5

An administrator has been tasked with preventing the use of unauthorized USB storage devices from being used in the environment.

Which item needs to be enabled in order to enforce this requirement?

AEnable the Block access to all unapproved USB devices within the policies option.

BChoose to disable USB device access on each endpoint from the Inventory page.

CSelect the option to block USB devices from the Reputation page.

DElect to approve only allowed USB devices from the USB Devices page.

Show Answer

VMware 5V0-93.22 Quiz:1 Topic:1 Questions:1-5