{"id":21087,"date":"2021-03-23T02:40:39","date_gmt":"2021-03-23T02:40:39","guid":{"rendered":"https:\/\/www.dumpsbase.com\/freedumps\/?p=21087"},"modified":"2021-03-23T02:40:43","modified_gmt":"2021-03-23T02:40:43","slug":"vmware-carbon-black-portfolio-skills-5v0-91-20-exam-dumps","status":"publish","type":"post","link":"https:\/\/www.dumpsbase.com\/freedumps\/vmware-carbon-black-portfolio-skills-5v0-91-20-exam-dumps.html","title":{"rendered":"VMware Carbon Black Portfolio Skills 5V0-91.20 Exam Dumps"},"content":{"rendered":"\n<p>Passing 5V0-91.20 VMware Carbon Black Portfolio Skills exam validates candidate\u2019s knowledge on how to use the capabilities of the products according to the organization\u2019s security posture and organizational policies. You can get new\u00a0 5V0-91.20 Exam Dumps with 60 questions and answers to best prepare for your test, it will ensure you pass your VMware 5V0-91.20 exam with DumpsBase 5V0-91.20 dumps questions online.<\/p>\n<h1>Check DumpsBase <span style=\"color: #ffcc00;\">5V0-91.20 free dumps<\/span> online first<\/h1>\n<script>\n\t  window.fbAsyncInit = function() {\n\t    FB.init({\n\t      appId            : '622169541470367',\n\t      autoLogAppEvents : true,\n\t      xfbml            : true,\n\t      version          : 'v3.1'\n\t    });\n\t  };\n\t\n\t  (function(d, s, id){\n\t     var js, fjs = d.getElementsByTagName(s)[0];\n\t     if (d.getElementById(id)) {return;}\n\t     js = d.createElement(s); js.id = id;\n\t     js.src = \"https:\/\/connect.facebook.net\/en_US\/sdk.js\";\n\t     fjs.parentNode.insertBefore(js, fjs);\n\t   }(document, 'script', 'facebook-jssdk'));\n\t<\/script><script type=\"text\/javascript\" >\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \nif(!window.jQuery) alert(\"The important jQuery library is not properly loaded in your site. Your WordPress theme is probably missing the essential wp_head() call. You can switch to another theme and you will see that the plugin works fine and this notice disappears. If you are still not sure what to do you can contact us for help.\");\n});\n<\/script>  \n  \n<div  id=\"watupro_quiz\" class=\"quiz-area single-page-quiz\">\n<p id=\"submittingExam5246\" style=\"display:none;text-align:center;\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\"><\/p>\n\n<div class=\"watupro-exam-description\" id=\"description-quiz-5246\"><\/div>\n\n<form action=\"\" method=\"post\" class=\"quiz-form\" id=\"quiz-5246\"  enctype=\"multipart\/form-data\" >\n<div class='watu-question ' id='question-1' style=';'><div id='questionWrap-1'  class='   watupro-question-id-171986'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>1. <\/span>An administrator wants to query the status of the firewall for all endpoints. The administrator will query the registry key found here HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParameter sFirewallPolicy <br \/>\r<br>StandardProfile. <br \/>\r<br>To make the results easier to understand, the administrator wants to return either enabled or disabled for the results, rather than the value from the registry key. <br \/>\r<br>Which SQL statement will rewrite the output based on a specific result set returned from the system?<\/div><input type='hidden' name='question_id[]' id='qID_1' value='171986' \/><input type='hidden' id='answerType171986' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171986[]' id='answer-id-695220' class='answer   answerof-171986 ' value='695220'   \/><label for='answer-id-695220' id='answer-label-695220' class=' answer'><span>CASE<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171986[]' id='answer-id-695221' class='answer   answerof-171986 ' value='695221'   \/><label for='answer-id-695221' id='answer-label-695221' class=' answer'><span>AS<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171986[]' id='answer-id-695222' class='answer   answerof-171986 ' value='695222'   \/><label for='answer-id-695222' id='answer-label-695222' class=' answer'><span>ALTER<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171986[]' id='answer-id-695223' class='answer   answerof-171986 ' value='695223'   \/><label for='answer-id-695223' id='answer-label-695223' class=' answer'><span>SELECT<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-2' style=';'><div id='questionWrap-2'  class='   watupro-question-id-171987'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>2. <\/span>An analyst navigates to the alerts page in Endpoint Standard and sees the following: <br \/>\r<br><br><img decoding=\"async\" width=650 height=94 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2021\/03\/image002-60.jpg\" v:shapes=\"_x0000_i1025\"><br><br \/>\r<br>What does the yellow color represent on the left side of the row?<\/div><input type='hidden' name='question_id[]' id='qID_2' value='171987' \/><input type='hidden' id='answerType171987' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171987[]' id='answer-id-695224' class='answer   answerof-171987 ' value='695224'   \/><label for='answer-id-695224' id='answer-label-695224' class=' answer'><span>It is an alert from a watchlist rather than the analytics engine.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171987[]' id='answer-id-695225' class='answer   answerof-171987 ' value='695225'   \/><label for='answer-id-695225' id='answer-label-695225' class=' answer'><span>It is a threat alert and warrants immediate investigation.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171987[]' id='answer-id-695226' class='answer   answerof-171987 ' value='695226'   \/><label for='answer-id-695226' id='answer-label-695226' class=' answer'><span>It is an observed alert and may indicate suspicious behavior.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171987[]' id='answer-id-695227' class='answer   answerof-171987 ' value='695227'   \/><label for='answer-id-695227' id='answer-label-695227' class=' answer'><span>It is a dismissed alert within the user interface.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-3' style=';'><div id='questionWrap-3'  class='   watupro-question-id-171988'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>3. <\/span>An Enterprise EDR administrator sees the process in the graphic on the Investigate page but does not see an alert for this process: <br \/>\r<br><br><img decoding=\"async\" width=649 height=121 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2021\/03\/image004-54.jpg\" v:shapes=\"_x0000_i1026\"><br><br \/>\r<br>How can the administrator generate an alert for future hits against this watchlist?<\/div><input type='hidden' name='question_id[]' id='qID_3' value='171988' \/><input type='hidden' id='answerType171988' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171988[]' id='answer-id-695228' class='answer   answerof-171988 ' value='695228'   \/><label for='answer-id-695228' id='answer-label-695228' class=' answer'><span>select the watchlist on the watchlists page, select the Scheduled Task Created report, and use Take Action to select Alert on hit for the report.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171988[]' id='answer-id-695229' class='answer   answerof-171988 ' value='695229'   \/><label for='answer-id-695229' id='answer-label-695229' class=' answer'><span>Select the watchlist on the watchlists page, select the Scheduled Task Created report, and use Take Action to toggle Alert on hit to On.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171988[]' id='answer-id-695230' class='answer   answerof-171988 ' value='695230'   \/><label for='answer-id-695230' id='answer-label-695230' class=' answer'><span>Select the watchlist on the watchlists page and click on Alerts: Off to toggle the alerts to On.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171988[]' id='answer-id-695231' class='answer   answerof-171988 ' value='695231'   \/><label for='answer-id-695231' id='answer-label-695231' class=' answer'><span>Select the watchlist on the watchlists page, use Take Action to select Edit, and select Alert on hit.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-4' style=';'><div id='questionWrap-4'  class='   watupro-question-id-171989'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>4. <\/span>An administrator runs multiple queries on tables and combines the results after the fact to correlate data. The administrator needs to combine rows from multiple tables based on data from a related column in each table. <br \/>\r<br>Which SQL statement should be used to achieve this goal?<\/div><input type='hidden' name='question_id[]' id='qID_4' value='171989' \/><input type='hidden' id='answerType171989' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171989[]' id='answer-id-695232' class='answer   answerof-171989 ' value='695232'   \/><label for='answer-id-695232' id='answer-label-695232' class=' answer'><span>JOIN<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171989[]' id='answer-id-695233' class='answer   answerof-171989 ' value='695233'   \/><label for='answer-id-695233' id='answer-label-695233' class=' answer'><span>WHERE<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171989[]' id='answer-id-695234' class='answer   answerof-171989 ' value='695234'   \/><label for='answer-id-695234' id='answer-label-695234' class=' answer'><span>AS<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171989[]' id='answer-id-695235' class='answer   answerof-171989 ' value='695235'   \/><label for='answer-id-695235' id='answer-label-695235' class=' answer'><span>COMBINE<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-5' style=';'><div id='questionWrap-5'  class='   watupro-question-id-171990'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>5. <\/span>An administrator wants to allow files to run from a network share. <br \/>\r<br>Which rule type should the administrator configure?<\/div><input type='hidden' name='question_id[]' id='qID_5' value='171990' \/><input type='hidden' id='answerType171990' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171990[]' id='answer-id-695236' class='answer   answerof-171990 ' value='695236'   \/><label for='answer-id-695236' id='answer-label-695236' class=' answer'><span>Execute Prompt (Shared Path)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171990[]' id='answer-id-695237' class='answer   answerof-171990 ' value='695237'   \/><label for='answer-id-695237' id='answer-label-695237' class=' answer'><span>Trusted Path<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171990[]' id='answer-id-695238' class='answer   answerof-171990 ' value='695238'   \/><label for='answer-id-695238' id='answer-label-695238' class=' answer'><span>Network Execute (Allow)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171990[]' id='answer-id-695239' class='answer   answerof-171990 ' value='695239'   \/><label for='answer-id-695239' id='answer-label-695239' class=' answer'><span>Write Approve (Network)<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-6' style=';'><div id='questionWrap-6'  class='   watupro-question-id-171991'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>6. <\/span>What are the three available methods in VMware Carbon Black App Control by which an endpoint (agent) can be assigned to a specific policy? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_6' value='171991' \/><input type='hidden' id='answerType171991' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171991[]' id='answer-id-695240' class='answer   answerof-171991 ' value='695240'   \/><label for='answer-id-695240' id='answer-label-695240' class=' answer'><span>By pushing the designated GPO script<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171991[]' id='answer-id-695241' class='answer   answerof-171991 ' value='695241'   \/><label for='answer-id-695241' id='answer-label-695241' class=' answer'><span>Via DASCLI command<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171991[]' id='answer-id-695242' class='answer   answerof-171991 ' value='695242'   \/><label for='answer-id-695242' id='answer-label-695242' class=' answer'><span>By installing the agent via SCCM<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171991[]' id='answer-id-695243' class='answer   answerof-171991 ' value='695243'   \/><label for='answer-id-695243' id='answer-label-695243' class=' answer'><span>Manual policy assignment<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171991[]' id='answer-id-695244' class='answer   answerof-171991 ' value='695244'   \/><label for='answer-id-695244' id='answer-label-695244' class=' answer'><span>By branded\/policy-specific installer<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171991[]' id='answer-id-695245' class='answer   answerof-171991 ' value='695245'   \/><label for='answer-id-695245' id='answer-label-695245' class=' answer'><span>By Active Directory Mapping<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-7' style=';'><div id='questionWrap-7'  class='   watupro-question-id-171992'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>7. <\/span>Which Live Query statement is properly constructed?<\/div><input type='hidden' name='question_id[]' id='qID_7' value='171992' \/><input type='hidden' id='answerType171992' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171992[]' id='answer-id-695246' class='answer   answerof-171992 ' value='695246'   \/><label for='answer-id-695246' id='answer-label-695246' class=' answer'><span>SELECT * FROM 'users'<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171992[]' id='answer-id-695247' class='answer   answerof-171992 ' value='695247'   \/><label for='answer-id-695247' id='answer-label-695247' class=' answer'><span>select * from *:<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171992[]' id='answer-id-695248' class='answer   answerof-171992 ' value='695248'   \/><label for='answer-id-695248' id='answer-label-695248' class=' answer'><span>select from users;<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171992[]' id='answer-id-695249' class='answer   answerof-171992 ' value='695249'   \/><label for='answer-id-695249' id='answer-label-695249' class=' answer'><span>SELECT * FROM users;<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-8' style=';'><div id='questionWrap-8'  class='   watupro-question-id-171993'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>8. <\/span>An administrator has configured a policy to run a standard background scan. <br \/>\r<br>How long does this one-time scan take to complete on endpoints assigned to that policy?<\/div><input type='hidden' name='question_id[]' id='qID_8' value='171993' \/><input type='hidden' id='answerType171993' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171993[]' id='answer-id-695250' class='answer   answerof-171993 ' value='695250'   \/><label for='answer-id-695250' id='answer-label-695250' class=' answer'><span>180 days<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171993[]' id='answer-id-695251' class='answer   answerof-171993 ' value='695251'   \/><label for='answer-id-695251' id='answer-label-695251' class=' answer'><span>30 days<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171993[]' id='answer-id-695252' class='answer   answerof-171993 ' value='695252'   \/><label for='answer-id-695252' id='answer-label-695252' class=' answer'><span>3-5 days<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171993[]' id='answer-id-695253' class='answer   answerof-171993 ' value='695253'   \/><label for='answer-id-695253' id='answer-label-695253' class=' answer'><span>1 day<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-9' style=';'><div id='questionWrap-9'  class='   watupro-question-id-171994'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>9. <\/span>An analyst is investigating an alert within the Enterprise EDR console and needs to take action on it. <br \/>\r<br>Which three actions are available to take on the alert? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_9' value='171994' \/><input type='hidden' id='answerType171994' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171994[]' id='answer-id-695254' class='answer   answerof-171994 ' value='695254'   \/><label for='answer-id-695254' id='answer-label-695254' class=' answer'><span>Ignore alert<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171994[]' id='answer-id-695255' class='answer   answerof-171994 ' value='695255'   \/><label for='answer-id-695255' id='answer-label-695255' class=' answer'><span>Dismiss<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171994[]' id='answer-id-695256' class='answer   answerof-171994 ' value='695256'   \/><label for='answer-id-695256' id='answer-label-695256' class=' answer'><span>Dismiss on all devices if grouping is enabled<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171994[]' id='answer-id-695257' class='answer   answerof-171994 ' value='695257'   \/><label for='answer-id-695257' id='answer-label-695257' class=' answer'><span>Edit watchlist<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171994[]' id='answer-id-695258' class='answer   answerof-171994 ' value='695258'   \/><label for='answer-id-695258' id='answer-label-695258' class=' answer'><span>Save report<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-171994[]' id='answer-id-695259' class='answer   answerof-171994 ' value='695259'   \/><label for='answer-id-695259' id='answer-label-695259' class=' answer'><span>Notifications history<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-10' style=';'><div id='questionWrap-10'  class='   watupro-question-id-171995'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>10. <\/span>Review this EDR query: <br \/>\r<br>childproc_name:whoami.exe AND childproc_name:hostname.exe AND childproc_name:tasklist.exe AND childproc_name:ipconfig.exe <br \/>\r<br>Which process would show in the query results?<\/div><input type='hidden' name='question_id[]' id='qID_10' value='171995' \/><input type='hidden' id='answerType171995' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171995[]' id='answer-id-695260' class='answer   answerof-171995 ' value='695260'   \/><label for='answer-id-695260' id='answer-label-695260' class=' answer'><span>Any process invoked by whoami.exe, hostname.exe, tasklist.exe, and ipconfig.exe<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171995[]' id='answer-id-695261' class='answer   answerof-171995 ' value='695261'   \/><label for='answer-id-695261' id='answer-label-695261' class=' answer'><span>Any process invoked by whoami.exe, hostname.exe, tasklist.exe, or ipconfig.exe<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171995[]' id='answer-id-695262' class='answer   answerof-171995 ' value='695262'   \/><label for='answer-id-695262' id='answer-label-695262' class=' answer'><span>Any process invoking whoami.exe, hostname.exe, tasklist.exe, or ipconfig.exe<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171995[]' id='answer-id-695263' class='answer   answerof-171995 ' value='695263'   \/><label for='answer-id-695263' id='answer-label-695263' class=' answer'><span>Any process invoking whoami.exe, hostname.exe, tasklist.exe, and ipconfig.exe<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-11' style=';'><div id='questionWrap-11'  class='   watupro-question-id-171996'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>11. <\/span>An administrator is searching for any child processes of email clients with this query in Carbon Black Enterprise EDR: <br \/>\r<br>parent_name:outlook.exe OR parent_name:thunderbird.exe OR parent_name:eudora.exe <br \/>\r<br>The administrator would like to modify this query to only show child processes that do not have a known reputation in the Carbon Black Cloud. <br \/>\r<br>Which search field can be added to the query to show the desired results?<\/div><input type='hidden' name='question_id[]' id='qID_11' value='171996' \/><input type='hidden' id='answerType171996' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171996[]' id='answer-id-695264' class='answer   answerof-171996 ' value='695264'   \/><label for='answer-id-695264' id='answer-label-695264' class=' answer'><span>process_integrity_level<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171996[]' id='answer-id-695265' class='answer   answerof-171996 ' value='695265'   \/><label for='answer-id-695265' id='answer-label-695265' class=' answer'><span>process_reputation<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171996[]' id='answer-id-695266' class='answer   answerof-171996 ' value='695266'   \/><label for='answer-id-695266' id='answer-label-695266' class=' answer'><span>process_privileges<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171996[]' id='answer-id-695267' class='answer   answerof-171996 ' value='695267'   \/><label for='answer-id-695267' id='answer-label-695267' class=' answer'><span>process_cloud_reputation<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-12' style=';'><div id='questionWrap-12'  class='   watupro-question-id-171997'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>12. <\/span>An analyst is reviewing an alert in Enterprise EDR from a custom watchlist. The analyst disagrees with the alert severity rating. <br \/>\r<br>How can the analyst change the alert severity value, if this is possible?<\/div><input type='hidden' name='question_id[]' id='qID_12' value='171997' \/><input type='hidden' id='answerType171997' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171997[]' id='answer-id-695268' class='answer   answerof-171997 ' value='695268'   \/><label for='answer-id-695268' id='answer-label-695268' class=' answer'><span>The alert severity is assigned by the backend analytics.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171997[]' id='answer-id-695269' class='answer   answerof-171997 ' value='695269'   \/><label for='answer-id-695269' id='answer-label-695269' class=' answer'><span>The alert severity is not configurable.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171997[]' id='answer-id-695270' class='answer   answerof-171997 ' value='695270'   \/><label for='answer-id-695270' id='answer-label-695270' class=' answer'><span>Change the alert severity on the watchlist.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171997[]' id='answer-id-695271' class='answer   answerof-171997 ' value='695271'   \/><label for='answer-id-695271' id='answer-label-695271' class=' answer'><span>Change the alert severity on the report.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-13' style=';'><div id='questionWrap-13'  class='   watupro-question-id-171998'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>13. <\/span>How long will Live Queries in Carbon Black Audit and Remediation run before timing out?<\/div><input type='hidden' name='question_id[]' id='qID_13' value='171998' \/><input type='hidden' id='answerType171998' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171998[]' id='answer-id-695272' class='answer   answerof-171998 ' value='695272'   \/><label for='answer-id-695272' id='answer-label-695272' class=' answer'><span>30 days<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171998[]' id='answer-id-695273' class='answer   answerof-171998 ' value='695273'   \/><label for='answer-id-695273' id='answer-label-695273' class=' answer'><span>14 days<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171998[]' id='answer-id-695274' class='answer   answerof-171998 ' value='695274'   \/><label for='answer-id-695274' id='answer-label-695274' class=' answer'><span>180 days<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171998[]' id='answer-id-695275' class='answer   answerof-171998 ' value='695275'   \/><label for='answer-id-695275' id='answer-label-695275' class=' answer'><span>7 days<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-14' style=';'><div id='questionWrap-14'  class='   watupro-question-id-171999'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>14. <\/span>Which reputation is processed with the lowest priority for Endpoint Standard?<\/div><input type='hidden' name='question_id[]' id='qID_14' value='171999' \/><input type='hidden' id='answerType171999' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171999[]' id='answer-id-695276' class='answer   answerof-171999 ' value='695276'   \/><label for='answer-id-695276' id='answer-label-695276' class=' answer'><span>Local White<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171999[]' id='answer-id-695277' class='answer   answerof-171999 ' value='695277'   \/><label for='answer-id-695277' id='answer-label-695277' class=' answer'><span>Known Malware<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171999[]' id='answer-id-695278' class='answer   answerof-171999 ' value='695278'   \/><label for='answer-id-695278' id='answer-label-695278' class=' answer'><span>Trusted White<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-171999[]' id='answer-id-695279' class='answer   answerof-171999 ' value='695279'   \/><label for='answer-id-695279' id='answer-label-695279' class=' answer'><span>Common White<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-15' style=';'><div id='questionWrap-15'  class='   watupro-question-id-172000'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>15. <\/span>Which value should an administrator use when reviewing an alert to determine the file reputation at the time the event occurred?<\/div><input type='hidden' name='question_id[]' id='qID_15' value='172000' \/><input type='hidden' id='answerType172000' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172000[]' id='answer-id-695280' class='answer   answerof-172000 ' value='695280'   \/><label for='answer-id-695280' id='answer-label-695280' class=' answer'><span>Cloud Reputation (Initial)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172000[]' id='answer-id-695281' class='answer   answerof-172000 ' value='695281'   \/><label for='answer-id-695281' id='answer-label-695281' class=' answer'><span>Effective Reputation<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172000[]' id='answer-id-695282' class='answer   answerof-172000 ' value='695282'   \/><label for='answer-id-695282' id='answer-label-695282' class=' answer'><span>Local Reputation<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172000[]' id='answer-id-695283' class='answer   answerof-172000 ' value='695283'   \/><label for='answer-id-695283' id='answer-label-695283' class=' answer'><span>Cloud Reputation (Current)<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-16' style=';'><div id='questionWrap-16'  class='   watupro-question-id-172001'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>16. <\/span>App Control System Health email alerts for excessive agent backlog are occurring hourly. This is overwhelming the analysts, and they would like to reduce the notifications. <br \/>\r<br>How can the analyst reduce the unneeded alerts?<\/div><input type='hidden' name='question_id[]' id='qID_16' value='172001' \/><input type='hidden' id='answerType172001' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172001[]' id='answer-id-695284' class='answer   answerof-172001 ' value='695284'   \/><label for='answer-id-695284' id='answer-label-695284' class=' answer'><span>Set the email address for subscribers to an invalid email.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172001[]' id='answer-id-695285' class='answer   answerof-172001 ' value='695285'   \/><label for='answer-id-695285' id='answer-label-695285' class=' answer'><span>Change reminder email to daily or disabled.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172001[]' id='answer-id-695286' class='answer   answerof-172001 ' value='695286'   \/><label for='answer-id-695286' id='answer-label-695286' class=' answer'><span>Disable the alert.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172001[]' id='answer-id-695287' class='answer   answerof-172001 ' value='695287'   \/><label for='answer-id-695287' id='answer-label-695287' class=' answer'><span>Delete the alert.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-17' style=';'><div id='questionWrap-17'  class='   watupro-question-id-172002'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>17. <\/span>Which statement filters data to only return rows where the publisher of the software includes VMware anywhere in the name?<\/div><input type='hidden' name='question_id[]' id='qID_17' value='172002' \/><input type='hidden' id='answerType172002' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172002[]' id='answer-id-695288' class='answer   answerof-172002 ' value='695288'   \/><label for='answer-id-695288' id='answer-label-695288' class=' answer'><span>WHERE publisher = &quot;%VMware%&quot;<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172002[]' id='answer-id-695289' class='answer   answerof-172002 ' value='695289'   \/><label for='answer-id-695289' id='answer-label-695289' class=' answer'><span>WHERE publisher = &quot;%VMware&quot;<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172002[]' id='answer-id-695290' class='answer   answerof-172002 ' value='695290'   \/><label for='answer-id-695290' id='answer-label-695290' class=' answer'><span>WHERE publisher LIKE &quot;VMware%&quot;<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172002[]' id='answer-id-695291' class='answer   answerof-172002 ' value='695291'   \/><label for='answer-id-695291' id='answer-label-695291' class=' answer'><span>WHERE publisher LIKE &quot;%VMware%&quot;<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-18' style=';'><div id='questionWrap-18'  class='   watupro-question-id-172003'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>18. <\/span>A company wants to implement the strictest security controls for computers on which the software seldom changes (i.e., servers or single-purpose systems). <br \/>\r<br>Which Enforcement Level is the most fitting?<\/div><input type='hidden' name='question_id[]' id='qID_18' value='172003' \/><input type='hidden' id='answerType172003' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172003[]' id='answer-id-695292' class='answer   answerof-172003 ' value='695292'   \/><label for='answer-id-695292' id='answer-label-695292' class=' answer'><span>Low Enforcement<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172003[]' id='answer-id-695293' class='answer   answerof-172003 ' value='695293'   \/><label for='answer-id-695293' id='answer-label-695293' class=' answer'><span>Medium Enforcement<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172003[]' id='answer-id-695294' class='answer   answerof-172003 ' value='695294'   \/><label for='answer-id-695294' id='answer-label-695294' class=' answer'><span>High Enforcement<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172003[]' id='answer-id-695295' class='answer   answerof-172003 ' value='695295'   \/><label for='answer-id-695295' id='answer-label-695295' class=' answer'><span>None (Visibility)<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-19' style=';'><div id='questionWrap-19'  class='   watupro-question-id-172004'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>19. <\/span>Review this result after executing a query in the Process Search page, noting the circled black dot: <br \/>\r<br><br><img decoding=\"async\" width=649 height=98 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2021\/03\/image006-48.jpg\" v:shapes=\"_x0000_i1027\"><br><br \/>\r<br>What is the meaning of the black dot shown under Tags?<\/div><input type='hidden' name='question_id[]' id='qID_19' value='172004' \/><input type='hidden' id='answerType172004' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172004[]' id='answer-id-695296' class='answer   answerof-172004 ' value='695296'   \/><label for='answer-id-695296' id='answer-label-695296' class=' answer'><span>The execution of the process resulted in watchlist hits.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172004[]' id='answer-id-695297' class='answer   answerof-172004 ' value='695297'   \/><label for='answer-id-695297' id='answer-label-695297' class=' answer'><span>The events for the process were tagged in an investigation.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172004[]' id='answer-id-695298' class='answer   answerof-172004 ' value='695298'   \/><label for='answer-id-695298' id='answer-label-695298' class=' answer'><span>The events for the process were also sent to the Syslog Server.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172004[]' id='answer-id-695299' class='answer   answerof-172004 ' value='695299'   \/><label for='answer-id-695299' id='answer-label-695299' class=' answer'><span>The execution of the process resulted in feed hits.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-20' style=';'><div id='questionWrap-20'  class='   watupro-question-id-172005'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>20. <\/span>How often do watchlists run?<\/div><input type='hidden' name='question_id[]' id='qID_20' value='172005' \/><input type='hidden' id='answerType172005' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172005[]' id='answer-id-695300' class='answer   answerof-172005 ' value='695300'   \/><label for='answer-id-695300' id='answer-label-695300' class=' answer'><span>Every 10 minutes<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172005[]' id='answer-id-695301' class='answer   answerof-172005 ' value='695301'   \/><label for='answer-id-695301' id='answer-label-695301' class=' answer'><span>Every 5 minutes<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172005[]' id='answer-id-695302' class='answer   answerof-172005 ' value='695302'   \/><label for='answer-id-695302' id='answer-label-695302' class=' answer'><span>Watchlists can be configured to run at scheduled intervals<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172005[]' id='answer-id-695303' class='answer   answerof-172005 ' value='695303'   \/><label for='answer-id-695303' id='answer-label-695303' class=' answer'><span>Every 30 minutes<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-21' style=';'><div id='questionWrap-21'  class='   watupro-question-id-172006'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>21. <\/span>Which ID in Endpoint Standard is associated with one specific action, involves up to three different hashes (Parent, Process, Target), and occurs on a single device at a specific time?<\/div><input type='hidden' name='question_id[]' id='qID_21' value='172006' \/><input type='hidden' id='answerType172006' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172006[]' id='answer-id-695304' class='answer   answerof-172006 ' value='695304'   \/><label for='answer-id-695304' id='answer-label-695304' class=' answer'><span>Threat ID<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172006[]' id='answer-id-695305' class='answer   answerof-172006 ' value='695305'   \/><label for='answer-id-695305' id='answer-label-695305' class=' answer'><span>Process ID<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172006[]' id='answer-id-695306' class='answer   answerof-172006 ' value='695306'   \/><label for='answer-id-695306' id='answer-label-695306' class=' answer'><span>Alert ID<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172006[]' id='answer-id-695307' class='answer   answerof-172006 ' value='695307'   \/><label for='answer-id-695307' id='answer-label-695307' class=' answer'><span>Event ID<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-22' style=';'><div id='questionWrap-22'  class='   watupro-question-id-172007'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>22. <\/span>There is a requirement to block ransomware when a sensor is offline. <br \/>\r<br>Which blocking and isolation rule fulfills this requirement?<\/div><input type='hidden' name='question_id[]' id='qID_22' value='172007' \/><input type='hidden' id='answerType172007' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172007[]' id='answer-id-695308' class='answer   answerof-172007 ' value='695308'   \/><label for='answer-id-695308' id='answer-label-695308' class=' answer'><span>Known Malware \u2015&gt; Performs ransomware-like behavior \u2015&gt; Terminate process<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172007[]' id='answer-id-695309' class='answer   answerof-172007 ' value='695309'   \/><label for='answer-id-695309' id='answer-label-695309' class=' answer'><span>Not Listed Application \u2015&gt; Performs ransomware-like behavior \u2015&gt; Deny operation<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172007[]' id='answer-id-695310' class='answer   answerof-172007 ' value='695310'   \/><label for='answer-id-695310' id='answer-label-695310' class=' answer'><span>Suspect Malware \u2015&gt; Performs ransomware-like behavior \u2015&gt; Deny operation<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172007[]' id='answer-id-695311' class='answer   answerof-172007 ' value='695311'   \/><label for='answer-id-695311' id='answer-label-695311' class=' answer'><span>Unknown Application \u2015&gt; Performs ransomware-like behavior \u2015&gt; Terminate process<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-23' style=';'><div id='questionWrap-23'  class='   watupro-question-id-172008'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>23. <\/span>Carbon Black App Control maintains an inventory of all interesting (executable) files on endpoints where the agent is installed. <br \/>\r<br>What is the initial inventory procedure called, and how can this process be triggered?<\/div><input type='hidden' name='question_id[]' id='qID_23' value='172008' \/><input type='hidden' id='answerType172008' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172008[]' id='answer-id-695312' class='answer   answerof-172008 ' value='695312'   \/><label for='answer-id-695312' id='answer-label-695312' class=' answer'><span>Inventorying; enable Discovery mode<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172008[]' id='answer-id-695313' class='answer   answerof-172008 ' value='695313'   \/><label for='answer-id-695313' id='answer-label-695313' class=' answer'><span>Baselining; install the agent<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172008[]' id='answer-id-695314' class='answer   answerof-172008 ' value='695314'   \/><label for='answer-id-695314' id='answer-label-695314' class=' answer'><span>Discovery; place agent into Disabled mode<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172008[]' id='answer-id-695315' class='answer   answerof-172008 ' value='695315'   \/><label for='answer-id-695315' id='answer-label-695315' class=' answer'><span>Initialization; move agent out of Disabled mode<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-24' style=';'><div id='questionWrap-24'  class='   watupro-question-id-172009'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>24. <\/span>Review the following query: <br \/>\r<br>path:c:program files (x86)microsoft <br \/>\r<br>How would this query input term be interpreted?<\/div><input type='hidden' name='question_id[]' id='qID_24' value='172009' \/><input type='hidden' id='answerType172009' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172009[]' id='answer-id-695316' class='answer   answerof-172009 ' value='695316'   \/><label for='answer-id-695316' id='answer-label-695316' class=' answer'><span>c:program files x86microsoft<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172009[]' id='answer-id-695317' class='answer   answerof-172009 ' value='695317'   \/><label for='answer-id-695317' id='answer-label-695317' class=' answer'><span>c:rogram files (x86)icrosoft<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172009[]' id='answer-id-695318' class='answer   answerof-172009 ' value='695318'   \/><label for='answer-id-695318' id='answer-label-695318' class=' answer'><span>c:rogramfilesx86icrosoft<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172009[]' id='answer-id-695319' class='answer   answerof-172009 ' value='695319'   \/><label for='answer-id-695319' id='answer-label-695319' class=' answer'><span>c:program files (x86)microsoft<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-25' style=';'><div id='questionWrap-25'  class='   watupro-question-id-172010'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>25. <\/span>Which action is only available for the \u201cPerforms any operation\u201d and \u201cPerforms any API Operation\u201d operation attempts?<\/div><input type='hidden' name='question_id[]' id='qID_25' value='172010' \/><input type='hidden' id='answerType172010' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172010[]' id='answer-id-695320' class='answer   answerof-172010 ' value='695320'   \/><label for='answer-id-695320' id='answer-label-695320' class=' answer'><span>Bypass<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172010[]' id='answer-id-695321' class='answer   answerof-172010 ' value='695321'   \/><label for='answer-id-695321' id='answer-label-695321' class=' answer'><span>Allow &amp; Log<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172010[]' id='answer-id-695322' class='answer   answerof-172010 ' value='695322'   \/><label for='answer-id-695322' id='answer-label-695322' class=' answer'><span>Runs or is Running<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172010[]' id='answer-id-695323' class='answer   answerof-172010 ' value='695323'   \/><label for='answer-id-695323' id='answer-label-695323' class=' answer'><span>Allow<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-26' style=';'><div id='questionWrap-26'  class='   watupro-question-id-172011'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>26. <\/span>An incorrectly constructed watchlist generates 10,000 incorrect alerts. <br \/>\r<br>How should an administrator resolve this issue?<\/div><input type='hidden' name='question_id[]' id='qID_26' value='172011' \/><input type='hidden' id='answerType172011' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172011[]' id='answer-id-695324' class='answer   answerof-172011 ' value='695324'   \/><label for='answer-id-695324' id='answer-label-695324' class=' answer'><span>Delete the watchlist to automatically clear the alerts, and then create a new watchlist with the correct criteria.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172011[]' id='answer-id-695325' class='answer   answerof-172011 ' value='695325'   \/><label for='answer-id-695325' id='answer-label-695325' class=' answer'><span>From the Triage Alerts Page, use the facets to select the watchlist, click the Wrench button to \u201cMark all as Resolved False Positive\u201d, and then update the watchlist with the correct criteria.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172011[]' id='answer-id-695326' class='answer   answerof-172011 ' value='695326'   \/><label for='answer-id-695326' id='answer-label-695326' class=' answer'><span>Update the Triage Alerts Page to show 200 alerts, click the Select All Checkbox, click the \u201cDismiss Alert(s)\u201d button for each page, and then update the watchlist with the correct criteria.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172011[]' id='answer-id-695327' class='answer   answerof-172011 ' value='695327'   \/><label for='answer-id-695327' id='answer-label-695327' class=' answer'><span>From the Watchlists Page, select the offending watchlist, click \u201cClear Alerts\u201d from the Action menu, and then update the watchlist with the correct criteria.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-27' style=';'><div id='questionWrap-27'  class='   watupro-question-id-172012'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>27. <\/span>A process has created a number of interesting (executable) files in one sequence. <br \/>\r<br>In addition to the event Subtype 'New Unapproved File to Computer', what other event subtype is likely to be associated with this sequence?<\/div><input type='hidden' name='question_id[]' id='qID_27' value='172012' \/><input type='hidden' id='answerType172012' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172012[]' id='answer-id-695328' class='answer   answerof-172012 ' value='695328'   \/><label for='answer-id-695328' id='answer-label-695328' class=' answer'><span>File Upload Completed<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172012[]' id='answer-id-695329' class='answer   answerof-172012 ' value='695329'   \/><label for='answer-id-695329' id='answer-label-695329' class=' answer'><span>New File Discovered on Startup<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172012[]' id='answer-id-695330' class='answer   answerof-172012 ' value='695330'   \/><label for='answer-id-695330' id='answer-label-695330' class=' answer'><span>File Group Created<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172012[]' id='answer-id-695331' class='answer   answerof-172012 ' value='695331'   \/><label for='answer-id-695331' id='answer-label-695331' class=' answer'><span>File Properties Modified<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-28' style=';'><div id='questionWrap-28'  class='   watupro-question-id-172013'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>28. <\/span>CORRECT TEXT <br \/>\r<br>Why would a sensor have a status of &quot;Inactive&quot;?<\/div><input type='hidden' name='question_id[]' id='qID_28' value='172013' \/><input type='hidden' id='answerType172013' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172013[]' id='answer-id-695332' class='answer   answerof-172013 ' value='695332'   \/><label for='answer-id-695332' id='answer-label-695332' class=' answer'><span>The sensor has not checked in within the last 30 days.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172013[]' id='answer-id-695333' class='answer   answerof-172013 ' value='695333'   \/><label for='answer-id-695333' id='answer-label-695333' class=' answer'><span>The sensor has been uninstalled from the endpoint for more than 30 days.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172013[]' id='answer-id-695334' class='answer   answerof-172013 ' value='695334'   \/><label for='answer-id-695334' id='answer-label-695334' class=' answer'><span>The device has been put in bypass for the last 30 days.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172013[]' id='answer-id-695335' class='answer   answerof-172013 ' value='695335'   \/><label for='answer-id-695335' id='answer-label-695335' class=' answer'><span>The sensor has been in disabled mode for more than 30 days.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-29' style=';'><div id='questionWrap-29'  class='   watupro-question-id-172014'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>29. <\/span>An Endpoint Standard analyst runs the query in the graphic below: <br \/>\r<br><br><img decoding=\"async\" width=649 height=404 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2021\/03\/image008-47.jpg\" v:shapes=\"_x0000_i1028\"><br><br \/>\r<br>Which three statements are true from the results shown? (Choose three.)<\/div><input type='hidden' name='question_id[]' id='qID_29' value='172014' \/><input type='hidden' id='answerType172014' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172014[]' id='answer-id-695336' class='answer   answerof-172014 ' value='695336'   \/><label for='answer-id-695336' id='answer-label-695336' class=' answer'><span>The process is a PowerShell process running a script with a .ps1 extension.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172014[]' id='answer-id-695337' class='answer   answerof-172014 ' value='695337'   \/><label for='answer-id-695337' id='answer-label-695337' class=' answer'><span>The process has a threat score greater than 4.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172014[]' id='answer-id-695338' class='answer   answerof-172014 ' value='695338'   \/><label for='answer-id-695338' id='answer-label-695338' class=' answer'><span>The process made a network connection to another system.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172014[]' id='answer-id-695339' class='answer   answerof-172014 ' value='695339'   \/><label for='answer-id-695339' id='answer-label-695339' class=' answer'><span>The process had a NOT_LISTED reputation at the time the event occurred.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172014[]' id='answer-id-695340' class='answer   answerof-172014 ' value='695340'   \/><label for='answer-id-695340' id='answer-label-695340' class=' answer'><span>The process was run under the NT_AUTHORITYSYSTEM user context.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172014[]' id='answer-id-695341' class='answer   answerof-172014 ' value='695341'   \/><label for='answer-id-695341' id='answer-label-695341' class=' answer'><span>The process was able to inject code into another process.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-30' style=';'><div id='questionWrap-30'  class='   watupro-question-id-172015'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>30. <\/span>A process wrote an executable file as detailed in the following event: <br \/>\r<br><br><img decoding=\"async\" width=649 height=45 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2021\/03\/image010-45.jpg\" v:shapes=\"_x0000_i1029\"><br><br \/>\r<br>Which rule type should be used to ensure that files of the same name and path, written by that process in the future, will not be blocked when they execute?<\/div><input type='hidden' name='question_id[]' id='qID_30' value='172015' \/><input type='hidden' id='answerType172015' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172015[]' id='answer-id-695342' class='answer   answerof-172015 ' value='695342'   \/><label for='answer-id-695342' id='answer-label-695342' class=' answer'><span>Trusted Path<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172015[]' id='answer-id-695343' class='answer   answerof-172015 ' value='695343'   \/><label for='answer-id-695343' id='answer-label-695343' class=' answer'><span>File Creation Control<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172015[]' id='answer-id-695344' class='answer   answerof-172015 ' value='695344'   \/><label for='answer-id-695344' id='answer-label-695344' class=' answer'><span>Advances (Write-Ignore)<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172015[]' id='answer-id-695345' class='answer   answerof-172015 ' value='695345'   \/><label for='answer-id-695345' id='answer-label-695345' class=' answer'><span>Trusted Publisher<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-31' style=';'><div id='questionWrap-31'  class='   watupro-question-id-172016'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>31. <\/span>What is the meaning, if any, of the event Report write (removable media)?<\/div><input type='hidden' name='question_id[]' id='qID_31' value='172016' \/><input type='hidden' id='answerType172016' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172016[]' id='answer-id-695346' class='answer   answerof-172016 ' value='695346'   \/><label for='answer-id-695346' id='answer-label-695346' class=' answer'><span>This event would never occur. App Control does not report activity on removable media.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172016[]' id='answer-id-695347' class='answer   answerof-172016 ' value='695347'   \/><label for='answer-id-695347' id='answer-label-695347' class=' answer'><span>A Policy\u2019s device control setting \u2018Block writes to unapproved removable media\u2019 is set to Report Only. The event details show the process, file name, and hash modified or deleted on the removable media.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172016[]' id='answer-id-695348' class='answer   answerof-172016 ' value='695348'   \/><label for='answer-id-695348' id='answer-label-695348' class=' answer'><span>A Policy\u2019s device control setting \u2018Block writes to unapproved removable media\u2019 is set to Report Only. The event details show the process and file name modified or deleted on the unapproved removable media.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172016[]' id='answer-id-695349' class='answer   answerof-172016 ' value='695349'   \/><label for='answer-id-695349' id='answer-label-695349' class=' answer'><span>A Policy\u2019s device control setting \u2018Block writes to unapproved removable media\u2019 is set to Enabled. The event details show the process, file name, and hash modified or deleted on the removable media.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-32' style=';'><div id='questionWrap-32'  class='   watupro-question-id-172017'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>32. <\/span>Which statement is true when searching through the EDR server UI?<\/div><input type='hidden' name='question_id[]' id='qID_32' value='172017' \/><input type='hidden' id='answerType172017' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172017[]' id='answer-id-695350' class='answer   answerof-172017 ' value='695350'   \/><label for='answer-id-695350' id='answer-label-695350' class=' answer'><span>The backslash  is the character to escape characters.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172017[]' id='answer-id-695351' class='answer   answerof-172017 ' value='695351'   \/><label for='answer-id-695351' id='answer-label-695351' class=' answer'><span>Whitespaces between search terms imply the OR operator.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172017[]' id='answer-id-695352' class='answer   answerof-172017 ' value='695352'   \/><label for='answer-id-695352' id='answer-label-695352' class=' answer'><span>The percent symbol % is the character to represent a wildcard.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172017[]' id='answer-id-695353' class='answer   answerof-172017 ' value='695353'   \/><label for='answer-id-695353' id='answer-label-695353' class=' answer'><span>The exclamation point ! is the character to represent negation.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-33' style=';'><div id='questionWrap-33'  class='   watupro-question-id-172018'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>33. <\/span>An organization leverages a commonly used software distribution tool to manage deployment of enterprise software and updates. Custom rules are a suitable option to ensure the approval of files delivered by this tool. <br \/>\r<br>Which other trust mechanism could the organization configure for large-scale approval of these files?<\/div><input type='hidden' name='question_id[]' id='qID_33' value='172018' \/><input type='hidden' id='answerType172018' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172018[]' id='answer-id-695354' class='answer   answerof-172018 ' value='695354'   \/><label for='answer-id-695354' id='answer-label-695354' class=' answer'><span>Windows Update<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172018[]' id='answer-id-695355' class='answer   answerof-172018 ' value='695355'   \/><label for='answer-id-695355' id='answer-label-695355' class=' answer'><span>Trusted Distributor<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172018[]' id='answer-id-695356' class='answer   answerof-172018 ' value='695356'   \/><label for='answer-id-695356' id='answer-label-695356' class=' answer'><span>Local Approval Mode<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172018[]' id='answer-id-695357' class='answer   answerof-172018 ' value='695357'   \/><label for='answer-id-695357' id='answer-label-695357' class=' answer'><span>Rapid Config<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-34' style=';'><div id='questionWrap-34'  class='   watupro-question-id-172019'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>34. <\/span>An administrator receives an alert with the TTP DATA_TO_ENCRYPTION. <br \/>\r<br>What is known about the alert based on this TTP even if other parts of the alert are unknown?<\/div><input type='hidden' name='question_id[]' id='qID_34' value='172019' \/><input type='hidden' id='answerType172019' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172019[]' id='answer-id-695358' class='answer   answerof-172019 ' value='695358'   \/><label for='answer-id-695358' id='answer-label-695358' class=' answer'><span>A process attempted to delete encrypted data on the disk.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172019[]' id='answer-id-695359' class='answer   answerof-172019 ' value='695359'   \/><label for='answer-id-695359' id='answer-label-695359' class=' answer'><span>A process attempted to write a file to the disk.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172019[]' id='answer-id-695360' class='answer   answerof-172019 ' value='695360'   \/><label for='answer-id-695360' id='answer-label-695360' class=' answer'><span>A process attempted to modify a monitored file written by the sensor.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172019[]' id='answer-id-695361' class='answer   answerof-172019 ' value='695361'   \/><label for='answer-id-695361' id='answer-label-695361' class=' answer'><span>A process attempted to transfer encrypted data on the disk over the network.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-35' style=';'><div id='questionWrap-35'  class='   watupro-question-id-172020'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>35. <\/span>An administrator wants to find instances where the binary Is unsigned. <br \/>\r<br>Which term will accomplish this search?<\/div><input type='hidden' name='question_id[]' id='qID_35' value='172020' \/><input type='hidden' id='answerType172020' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172020[]' id='answer-id-695362' class='answer   answerof-172020 ' value='695362'   \/><label for='answer-id-695362' id='answer-label-695362' class=' answer'><span>NOT process_publisher:FILE_SIGNATURE_STATE_SIGNED<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172020[]' id='answer-id-695363' class='answer   answerof-172020 ' value='695363'   \/><label for='answer-id-695363' id='answer-label-695363' class=' answer'><span>NOT process_publisher_state:FILE_SIGNATURE_STATE_SIGNED<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172020[]' id='answer-id-695364' class='answer   answerof-172020 ' value='695364'   \/><label for='answer-id-695364' id='answer-label-695364' class=' answer'><span>process_publisher_state:FILE_SIGNATURE_STATE_NOT_SIGNED<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172020[]' id='answer-id-695365' class='answer   answerof-172020 ' value='695365'   \/><label for='answer-id-695365' id='answer-label-695365' class=' answer'><span>process_publisher:FILE_SIGNATURE_STATE_NOT_SIGNED<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-36' style=';'><div id='questionWrap-36'  class='   watupro-question-id-172021'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>36. <\/span>A Carbon Black administrator received an alert for an untrusted hash executing in the environment. <br \/>\r<br>Which two information items are found in the alert pane? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_36' value='172021' \/><input type='hidden' id='answerType172021' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172021[]' id='answer-id-695366' class='answer   answerof-172021 ' value='695366'   \/><label for='answer-id-695366' id='answer-label-695366' class=' answer'><span>Launch Live Query<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172021[]' id='answer-id-695367' class='answer   answerof-172021 ' value='695367'   \/><label for='answer-id-695367' id='answer-label-695367' class=' answer'><span>Launch process analysis<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172021[]' id='answer-id-695368' class='answer   answerof-172021 ' value='695368'   \/><label for='answer-id-695368' id='answer-label-695368' class=' answer'><span>User quarantine<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172021[]' id='answer-id-695369' class='answer   answerof-172021 ' value='695369'   \/><label for='answer-id-695369' id='answer-label-695369' class=' answer'><span>Add hash to banned list<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172021[]' id='answer-id-695370' class='answer   answerof-172021 ' value='695370'   \/><label for='answer-id-695370' id='answer-label-695370' class=' answer'><span>IOC short name<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-37' style=';'><div id='questionWrap-37'  class='   watupro-question-id-172022'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>37. <\/span>What is the maximum number of binaries (hashes) that can be banned using the web console?<\/div><input type='hidden' name='question_id[]' id='qID_37' value='172022' \/><input type='hidden' id='answerType172022' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172022[]' id='answer-id-695371' class='answer   answerof-172022 ' value='695371'   \/><label for='answer-id-695371' id='answer-label-695371' class=' answer'><span>500<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172022[]' id='answer-id-695372' class='answer   answerof-172022 ' value='695372'   \/><label for='answer-id-695372' id='answer-label-695372' class=' answer'><span>600<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172022[]' id='answer-id-695373' class='answer   answerof-172022 ' value='695373'   \/><label for='answer-id-695373' id='answer-label-695373' class=' answer'><span>300<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172022[]' id='answer-id-695374' class='answer   answerof-172022 ' value='695374'   \/><label for='answer-id-695374' id='answer-label-695374' class=' answer'><span>400<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-38' style=';'><div id='questionWrap-38'  class='   watupro-question-id-172023'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>38. <\/span>Refer to the exhibit: <br \/>\r<br><br><img decoding=\"async\" width=245 height=698 src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/uploads\/2021\/03\/image012-42.jpg\" v:shapes=\"_x0000_i1030\"><br><br \/>\r<br>Which two logic statements correctly explain filtering within the UI? (Choose two.)<\/div><input type='hidden' name='question_id[]' id='qID_38' value='172023' \/><input type='hidden' id='answerType172023' value='checkbox'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172023[]' id='answer-id-695375' class='answer   answerof-172023 ' value='695375'   \/><label for='answer-id-695375' id='answer-label-695375' class=' answer'><span>Filtering between fields is a logical OR<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172023[]' id='answer-id-695376' class='answer   answerof-172023 ' value='695376'   \/><label for='answer-id-695376' id='answer-label-695376' class=' answer'><span>Filtering within the same field is a logical AND<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172023[]' id='answer-id-695377' class='answer   answerof-172023 ' value='695377'   \/><label for='answer-id-695377' id='answer-label-695377' class=' answer'><span>Filtering between fields is a logical AND<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172023[]' id='answer-id-695378' class='answer   answerof-172023 ' value='695378'   \/><label for='answer-id-695378' id='answer-label-695378' class=' answer'><span>Filtering between fields is a logical XOR<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='checkbox' name='answer-172023[]' id='answer-id-695379' class='answer   answerof-172023 ' value='695379'   \/><label for='answer-id-695379' id='answer-label-695379' class=' answer'><span>Filtering within the same field is a logical OR<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-39' style=';'><div id='questionWrap-39'  class='   watupro-question-id-172024'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>39. <\/span>When executing a program in App Control, the notification message informs the user that the file is not approved with an option to request approval. <br \/>\r<br>Which Enforcement level is currently enacted?<\/div><input type='hidden' name='question_id[]' id='qID_39' value='172024' \/><input type='hidden' id='answerType172024' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172024[]' id='answer-id-695380' class='answer   answerof-172024 ' value='695380'   \/><label for='answer-id-695380' id='answer-label-695380' class=' answer'><span>High<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172024[]' id='answer-id-695381' class='answer   answerof-172024 ' value='695381'   \/><label for='answer-id-695381' id='answer-label-695381' class=' answer'><span>Low<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172024[]' id='answer-id-695382' class='answer   answerof-172024 ' value='695382'   \/><label for='answer-id-695382' id='answer-label-695382' class=' answer'><span>Medium<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172024[]' id='answer-id-695383' class='answer   answerof-172024 ' value='695383'   \/><label for='answer-id-695383' id='answer-label-695383' class=' answer'><span>Default<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div class='watu-question ' id='question-40' style=';'><div id='questionWrap-40'  class='   watupro-question-id-172025'>\n\t\t\t<div class='question-content'><div><span class='watupro_num'>40. <\/span>An alert for a device running a proprietary application is tied to a vital business operation. <br \/>\r<br>Which action is appropriate to take?<\/div><input type='hidden' name='question_id[]' id='qID_40' value='172025' \/><input type='hidden' id='answerType172025' value='radio'><!-- end question-content--><\/div><div class='question-choices watupro-choices-columns '><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172025[]' id='answer-id-695384' class='answer   answerof-172025 ' value='695384'   \/><label for='answer-id-695384' id='answer-label-695384' class=' answer'><span>Add the application to the Approved List.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172025[]' id='answer-id-695385' class='answer   answerof-172025 ' value='695385'   \/><label for='answer-id-695385' id='answer-label-695385' class=' answer'><span>Terminate the process.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172025[]' id='answer-id-695386' class='answer   answerof-172025 ' value='695386'   \/><label for='answer-id-695386' id='answer-label-695386' class=' answer'><span>Deny the operation.<\/span><\/label><\/div><div class='watupro-question-choice  ' dir='auto' ><input type='radio' name='answer-172025[]' id='answer-id-695387' class='answer   answerof-172025 ' value='695387'   \/><label for='answer-id-695387' id='answer-label-695387' class=' answer'><span>Quarantine the device.<\/span><\/label><\/div><!-- end question-choices--><\/div><!-- end questionWrap--><\/div><\/div><div style='display:none' id='question-41'>\n\t<div class='question-content'>\n\t\t<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/img\/loading.gif\" width=\"16\" height=\"16\" alt=\"Loading...\" title=\"Loading...\" \/>&nbsp;Loading...\t<\/div>\n<\/div>\n\n<br \/>\n\t\n\t\t\t<div class=\"watupro_buttons flex \" id=\"watuPROButtons5246\" >\n\t\t  <div id=\"prev-question\" style=\"display:none;\"><input type=\"button\" value=\"&lt; Previous\" onclick=\"WatuPRO.nextQuestion(event, 'previous');\"\/><\/div>\t\t  \t\t  \t\t   \n\t\t   \t  \t\t<div><input type=\"button\" name=\"action\" class=\"watupro-submit-button\" onclick=\"WatuPRO.submitResult(event)\" id=\"action-button\" value=\"View Results\"  \/>\n\t\t<\/div>\n\t\t<\/div>\n\t\t\n\t<input type=\"hidden\" name=\"quiz_id\" value=\"5246\" id=\"watuPROExamID\"\/>\n\t<input type=\"hidden\" name=\"start_time\" id=\"startTime\" value=\"2026-05-14 16:31:43\" \/>\n\t<input type=\"hidden\" name=\"start_timestamp\" id=\"startTimeStamp\" value=\"1778776303\" \/>\n\t<input type=\"hidden\" name=\"question_ids\" value=\"\" \/>\n\t<input type=\"hidden\" name=\"watupro_questions\" value=\"171986:695220,695221,695222,695223 | 171987:695224,695225,695226,695227 | 171988:695228,695229,695230,695231 | 171989:695232,695233,695234,695235 | 171990:695236,695237,695238,695239 | 171991:695240,695241,695242,695243,695244,695245 | 171992:695246,695247,695248,695249 | 171993:695250,695251,695252,695253 | 171994:695254,695255,695256,695257,695258,695259 | 171995:695260,695261,695262,695263 | 171996:695264,695265,695266,695267 | 171997:695268,695269,695270,695271 | 171998:695272,695273,695274,695275 | 171999:695276,695277,695278,695279 | 172000:695280,695281,695282,695283 | 172001:695284,695285,695286,695287 | 172002:695288,695289,695290,695291 | 172003:695292,695293,695294,695295 | 172004:695296,695297,695298,695299 | 172005:695300,695301,695302,695303 | 172006:695304,695305,695306,695307 | 172007:695308,695309,695310,695311 | 172008:695312,695313,695314,695315 | 172009:695316,695317,695318,695319 | 172010:695320,695321,695322,695323 | 172011:695324,695325,695326,695327 | 172012:695328,695329,695330,695331 | 172013:695332,695333,695334,695335 | 172014:695336,695337,695338,695339,695340,695341 | 172015:695342,695343,695344,695345 | 172016:695346,695347,695348,695349 | 172017:695350,695351,695352,695353 | 172018:695354,695355,695356,695357 | 172019:695358,695359,695360,695361 | 172020:695362,695363,695364,695365 | 172021:695366,695367,695368,695369,695370 | 172022:695371,695372,695373,695374 | 172023:695375,695376,695377,695378,695379 | 172024:695380,695381,695382,695383 | 172025:695384,695385,695386,695387\" \/>\n\t<input type=\"hidden\" name=\"no_ajax\" value=\"0\">\t\t\t<\/form>\n\t<p>&nbsp;<\/p>\n<\/div>\n\n<script type=\"text\/javascript\">\n\/\/jQuery(document).ready(function(){\ndocument.addEventListener(\"DOMContentLoaded\", function(event) { \t\nvar question_ids = \"171986,171987,171988,171989,171990,171991,171992,171993,171994,171995,171996,171997,171998,171999,172000,172001,172002,172003,172004,172005,172006,172007,172008,172009,172010,172011,172012,172013,172014,172015,172016,172017,172018,172019,172020,172021,172022,172023,172024,172025\";\nWatuPROSettings[5246] = {};\nWatuPRO.qArr = question_ids.split(',');\nWatuPRO.exam_id = 5246;\t    \nWatuPRO.post_id = 21087;\nWatuPRO.store_progress = 0;\nWatuPRO.curCatPage = 1;\nWatuPRO.requiredIDs=\"0\".split(\",\");\nWatuPRO.hAppID = \"0.29616100 1778776303\";\nvar url = \"https:\/\/www.dumpsbase.com\/freedumps\/wp-content\/plugins\/watupro\/show_exam.php\";\nWatuPRO.examMode = 1;\nWatuPRO.siteURL=\"https:\/\/www.dumpsbase.com\/freedumps\/wp-admin\/admin-ajax.php\";\nWatuPRO.emailIsNotRequired = 0;\nWatuPROIntel.init(5246);\nWatuPRO.inCategoryPages=1;});    \t \n<\/script>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[114,12065],"tags":[12066,12067,12068,12069,12070,12071],"class_list":["post-21087","post","type-post","status-publish","format-standard","hentry","category-vmware","category-vmware-carbon-black-endpoint-protection-2021","tag-5v0-91-20","tag-5v0-91-20-dumps","tag-5v0-91-20-dumps-questions","tag-5v0-91-20-exam-dumps","tag-5v0-91-20-exam-questions","tag-5v0-91-20-free-dumps"],"_links":{"self":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/21087","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/comments?post=21087"}],"version-history":[{"count":1,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/21087\/revisions"}],"predecessor-version":[{"id":21089,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/posts\/21087\/revisions\/21089"}],"wp:attachment":[{"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/media?parent=21087"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/categories?post=21087"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dumpsbase.com\/freedumps\/wp-json\/wp\/v2\/tags?post=21087"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}