VMware 5V0-93.22 問題集

質問 1：
An organization is implementing policy rules. The administrator mentions that one operation attempt must use a Terminate Process action.
Which operation attempt has this requirement?
A. Runs or is running
B. Scrapes memory of another process
D Invokes a command interpreter
C. Performs ransom ware-like behavior
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 2：
The VMware Carbon Black Cloud Sensor is not able to establish connectivity to the VMware Carbon Black Cloud Content Management URL over the standard SSL port TCP/443.
Which port, if any, will be the tailback?
A. It will not fallback and fail.
B. TCP/54443
C. TCP/8443
D. TCP/80
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
A security administrator notices an unusual software behavior on an endpoint. The administrator immediately used the search query to collect data and start analyzing indicators to find the solution.
What is a pre-requisite step in gathering specific vulnerability data to export it as a CSV file for analysis?
A. Access the Audit Log content to see associated events.
B. Enable cloud analysis.
C. Perform a custom search on the Endpoint Page.
D. Search for specific malware byhash or filename.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
An administrator wants to prevent ransomware that has not been seen before, without blocking other processes.
Which rule should be used?
A. [Unknown malware] [Runs or is running] [Terminate process]
B. [Adware or PUP] [Scrapes memory of another process] [Deny operation]
C. [Not listed application] [Runs or is running] [Terminate process]
D. [Not listed application] [Performs ransomware-like behavior] [Terminate process
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
An administrator has determined that the following rule was the cause for an unexpected block:
[Suspected malware] [Invokes a command interpreter] [Terminate process] All reputations for the process which was blocked show SUSPECT_MALWARE.
Which reputation was used by the sensor for the decision to terminate the process?
A. Effective reputation
B. Initial Cloud reputation
C. Actioned reputation
D. Current Cloud reputation
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 6：
A company wants to prevent an executable from running in their organization. The current reputation for the file is NOT LISTED, and the machines are in the default standard policy.
Which action should be taken to prevent the file from executing?
A. Add the hash to the MALWARE list.
B. Use Live Response to kill the process.
C. Use Live Response to delete the file.
D. Add the hash to the company banned list.
正解：D
解説: (Topexam メンバーにのみ表示されます)