VMware 5V0-93.22 問題集

質問 1：
Which statement accurately characterizes Alerts that are categorized as a "Threat" versus those categorized as
"Observed"?
A. "Threat" indicates a more likely malicious event. "Observed" are less likely to be malicious.
B. "Threat" indicates that no block (Deny or Terminate) has occurred. "Observed" indicates a block.
C. "Threat" indicates a block (Deny or Terminate) has occurred. "Observed" indicates that there is no block.
D. "Threat" indicates an ongoing attack. "Observed" indicates the attack is over and is being watched.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which VMware Carbon Black Cloud integration is supported for SIEM?
A. LogRhythm
B. Datadog
C. Splunk App
D. SolarWinds
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
An administrator is tasked to create a reputation override for a company-critical application based on the highest available priority in the reputation list. The company-critical application is already known by VMware Carbon Black.
Which method of reputation override must the administrator use?
A. IT Tool
B. Local Approved
C. Signing Certificate
D. Hash
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 4：
A security administrator is tasked to investigate an alert about a suspicious running process trying to modify a system registry.
Which components can be checked to further inspect the cause of the alert?
A. Command lines. Device ID, and priority score
B. Priority score, file reputation, and timestamp
C. TTPs involved, network connections, and child path
D. Event details, command lines, and TTPs involved
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
An administrator would like to proactively know that something may get blocked when putting a policy rule in the environment.
How can this information be obtained?
A. Put the rules in and see what happens to the endpoints.
D Determine what would happen based on previously used antivirus software
B. Search the data using the test rule functionality.
B Examine log files to see what would be impacted
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An administrator needs to make sure all files are scanned locally upon execution.
Which setting is necessary to complete this task?
A. Run Background Scan must be set to Expedited.
B. Signature Update frequency must be set to 2 hours.
C. On-Access File Scan Mode must be set to Aggressive.
D. Allow Signature Updates must be enabled.
正解：C
解説: (Topexam メンバーにのみ表示されます)