5V0-93.22 Actual Exam Questions

Last updated on Nov. 25, 2024.
Vendor:VMware
Exam Code:5V0-93.22
Exam Name:VMware Carbon Black Cloud Endpoint Standard Skills
Exam Questions:60
 

Topic 1 - Exam A

Question #1 Topic 1

An administrator has been tasked with preventing the use of unauthorized USB storage devices from being used in the environment.
Which item needs to be enabled in order to enforce this requirement?

  • A. Enable the Block access to all unapproved USB devices within the policies option.
  • B. Choose to disable USB device access on each endpoint from the Inventory page.
  • C. Select the option to block USB devices from the Reputation page.
  • D. Elect to approve only allowed USB devices from the USB Devices page.
Reveal Solution Hide Solution   Discussion  

Correct Answer: A 🗳️

Question #2 Topic 1

An administrator needs to create a search, but it must exclude "system.exe".
How should this task be completed?

  • A. #process_name:system.exe
  • B. *process_name:system.exe
  • C. <process_name:system.exe>
  • D. -process_name:system.exe
Reveal Solution Hide Solution   Discussion  

Correct Answer: D 🗳️

Question #3 Topic 1

An administrator needs to use an ID to search and investigate security incidents in Carbon Black Cloud.
Which three IDs may be used for this purpose? (Choose three.)

  • A. Threat
  • B. Hash
  • C. Sensor
  • D. Event
  • E. User
  • F. Alert
Reveal Solution Hide Solution   Discussion  

Correct Answer: BDF 🗳️

Question #4 Topic 1

Which VMware Carbon Black Cloud integration is supported for SIEM?

  • A. SolarWinds
  • B. LogRhythm
  • C. Splunk App
  • D. Datadog
Reveal Solution Hide Solution   Discussion  

Correct Answer: C 🗳️

file Viewing page 1 out of 15 pages.
Viewing questions 1-4 out of 60 questions
Next Questions
Browse atleast 50% to increase passing rate cup
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago