VMware 5V0-91.20 Online Practice Questions and Exam Preparation

VMware 5V0-91.20 Online Questions & Answers

• Question 1:

  This search is entered into the process search page: notepad.exe

  Which three statements about this query are true? (Choose three.)

  A. Only processes named notepad.exe will be returned.
  B. Since a field name is not selected, query performance will be impacted.
  C. A field identifier is required for all criteria within a process search.
  D. The search will fail with an error.
  E. All processes containing the text notepad.exe in any default field.
  F. Processes with registry modifications containing notepad.exe would be retuned.
  B. Since a field name is not selected, query performance will be impacted.
  E. All processes containing the text notepad.exe in any default field.
  F. Processes with registry modifications containing notepad.exe would be retuned.

• Question 2:

  An analyst navigates to the alerts page in Endpoint Standard and sees the following:

  

  What does the yellow color represent on the left side of the row?

  A. It is an alert from a watchlist rather than the analytics engine.
  B. It is a threat alert and warrants immediate investigation.
  C. It is an observed alert and may indicate suspicious behavior.
  D. It is a dismissed alert within the user interface.
  A. It is an alert from a watchlist rather than the analytics engine.

• Question 3:

  An administrator runs the following query in Audit and Remediation:

  SELECT *

  FROM users

  WHERE UID >= 500;

  How long will this query stay active and accept data from the sensors?

  A. 1 day
  B. 7 days
  C. 14 days
  D. 30 days
  D. 30 days

• Question 4:

  An administrator has configured a policy to run a standard background scan.

  How long does this one-time scan take to complete on endpoints assigned to that policy?

  A. 180 days
  B. 30 days
  C. 3-5 days
  D. 1 day
  B. 30 days

• Question 5:

  A process has created a number of interesting (executable) files in one sequence.

  In addition to the event Subtype 'New Unapproved File to Computer', what other event subtype is likely to be associated with this sequence?

  A. File Upload Completed
  B. New File Discovered on Startup
  C. File Group Created
  D. File Properties Modified
  B. New File Discovered on Startup

• Question 6:

  An analyst is reviewing an alert in Enterprise EDR from a custom watchlist. The analyst disagrees with the alert severity rating. How can the analyst change the alert severity value, if this is possible?

  A. The alert severity is assigned by the backend analytics.
  B. The alert severity is not configurable.
  C. Change the alert severity on the watchlist.
  D. Change the alert severity on the report.
  C. Change the alert severity on the watchlist.

• Question 7:

  A company wants to implement the strictest security controls for computers on which the software seldom changes (i.e., servers or single-purpose systems). Which Enforcement Level is the most fitting?

  A. Low Enforcement
  B. Medium Enforcement
  C. High Enforcement
  D. None (Visibility)
  C. High Enforcement

• Question 8:

  Which actions are available for Permissions?

  A. Approve, Upload, No Upload
  B. Deny Operation, Terminate Process
  C. Allow, Allow and Log, Bypass
  D. Performs any Operation, Runs or is running
  C. Allow, Allow and Log, Bypass

• Question 9:

  Which enforcement level does not block unapproved files but will block files that have been specifically banned?

  A. Medium Enforcement
  B. Disabled
  C. Visibility
  D. Low Enforcement
  B. Disabled

• Question 10:

  Refer to the exhibit, noting the circled red dot:

  

  What is the meaning of the red dot under Hits in the Process Search page?

  A. Whether the execution of the process resulted in a syslog hit
  B. Whether the execution of the process resulted in a sensor hit
  C. Whether the execution of the process resulted in matching hits for different users
  D. Whether the execution of the process resulted in a feed hit
  C. Whether the execution of the process resulted in matching hits for different users