VMware VCTA-SEC 2021 1V0-81.20 Questions & Answers

• Question 1:

  When filtering firewall rules after selecting an object to filter by, which four columns does the filter search? (Choose four.)

  A. Services

  B. Action

  C. Protocol

  D. Log

  E. Applied To

  F. Source

  G. Destinations

  Correct Answer: AEFG

• Question 2:

  Which shell command line syntax represents less suspicious danger than the others?

  A. sc create

  B. -Enc

  C. clear

  D. net user

  Correct Answer: C

• Question 3:

  Which Workspace ONE feature incorporates network range, device platform, and authentication method into decision making when evaluating an access request from a user?

  A. Sensors

  B. Compliance Policies

  C. Access Policies

  D. Restriction Profiles

  Correct Answer: C

• Question 4:

  In VMware Carbon Black Cloud, which two of these statements are true of the Permissions section of the Prevention tab under Policies? (Choose two.)

  A. assigns access rights to specific applications

  B. deny or close Applications or Actions

  C. take precedence over blocking and isolation

  D. allows specific operations or applications

  E. assigns access rights to specific individuals

  Correct Answer: AD

• Question 5:

  Which attack technique probes the environment for openings on devices or the firewall?

  A. Port Scan

  B. Denial of Service

  C. Living off the Land

  D. Phishing

  Correct Answer: A

• Question 6:

  Which three are VMware Workspace ONE SDK capabilities? (Choose three.)

  A. data loss prevention

  B. find my device

  C. single sign-on

  D. geofencing

  E. application blacklist

  Correct Answer: ACD

• Question 7:

  In a Workspace ONE deployment, Per App Tunnel uses the Native Platform API for which platforms?

  A. iOS and Android only

  B. iOS, Android, MacOS and Windows

  C. iOS and MacOS only

  D. Android and Windows only

  Correct Answer: A

• Question 8:

  In VMware Carbon Black Cloud, what is the search field you would use when searching for a command line?

  A. command_line:

  B. full_cmdline:

  C. process_cmdline:

  D. process_commandline:

  Correct Answer: D

  Reference: https://docs.vmware.com/en/VMware-Carbon-Black-Cloud/services/carbon-black-cloud-user-guide.pdf (29)

• Question 9:

  In VMware Carbon Black Cloud, which reputations have the highest priority during analysis?

  A. Known Priority

  B. Trusted Allow List

  C. Company Allow List

  D. Ignore

  Correct Answer: B

• Question 10:

  If the Compromised Protection switch is enabled in Workspace ONE UEM, what is the expected behavior on compromised devices in the environment?

  A. A tag is assigned to the compromised devices and the admin gets notification

  B. Compromised devices are automatically Enterprise Wiped

  C. A block is set for all network connections except to the VMware servers

  D. Devices are marked as non-compliant and the admin gets a notification

  Correct Answer: D