VMware 5V0-91.20 問題集

質問 1：
An administrator needs to query all endpoints in the HR group for instances of an obfuscated copy of cmd.exe.
Given this Enterprise EDR query:
process_name:cmd.exe AND device_group:HR AND NOT enriched:true
Which example could be added to the query to provide the desired results?
A. NOT process_name:cmd.exe
B. NOT process_original_filename:cmd.exe
C. NOT process_internal_name:cmd.exe
D. NOT process_company_name:cmd.exe
正解：A

質問 2：
An analyst is investigating an alert within the Enterprise EDR console and needs to take action on it.
Which three actions are available to take on the alert? (Choose three.)
A. Notifications history
B. Ignore alert
C. Edit watchlist
D. Save report
E. Dismiss on all devices if grouping is enabled
F. Dismiss
正解：D,E,F
解説: (Topexam メンバーにのみ表示されます)

質問 3：
An analyst has investigated multiple alerts on a number of HR workstations and found that java.exe is attempting to PowerShell. Of the Windows workstations in question, the analyst has also found that Java is installed in multiple locations. The analyst needs to block java.exe from this type of operation.
Which rule meets this need?
A. **/java.exe -> Invokes an untrusted process -> Terminate process
B. **\java.exe -> Invokes a command interpreter -> Deny operation
C. **/Program Files/*/java.exe-> Invokes an untrusted process -> Deny operation
D. **\Program Files\*\java.exe -> Invokes a command interpreter -> Terminate process
正解：D

質問 4：
Which reputation has the highest priority in Cloud Endpoint Standard?
A. Unknown
B. Known Malware
C. Adware/PUP Malware
D. Ignore
正解：B

質問 5：
Which statement filters data to only return rows where the publisher of the software includes VMware anywhere in the name?
A. WHERE publisher = "%VMware%"
B. WHERE publisher LIKE "%VMware%"
C. WHERE publisher LIKE "VMware%"
D. WHERE publisher = "%VMware"
正解：B

質問 6：
A company uses Audit and Remediation to check configurations and adhere to compliance regulations. The regulations require monthly reporting and twelve months of data retained.
How can an administrator accomplish this requirement with Audit and Remediation?
A. Schedule the query to run monthly, and no further action is required.
B. Schedule the query to run monthly, and export the results for each run to an external location.
C. Schedule the query to run monthly, and set the data retention to 12 months for the query.
D. Schedule the query to run monthly, and configure the audit log retention to 12 months.
正解：B

質問 7：
When dismissing alerts, when should an administrator select "If alert occurs in the future, automatically dismiss it from all devices"?
A. When the administrator wishes to remove the alert
B. When the administrator wishes to apply this action to all future alerts from the device
C. When the administrator wishes to be notified again to this behavior
D. When the administrator wishes to mark the alert instance as a false positive
正解：B

質問 8：
Refer to the exhibit:

Which two logic statements correctly explain filtering within the UI? (Choose two.)
A. Filtering within the same field is a logical OR
B. Filtering between fields is a logical XOR
C. Filtering between fields is a logical OR
D. Filtering within the same field is a logical AND
E. Filtering between fields is a logical AND
正解：B,C