5V0-91.20 무료 덤프문제 온라인 액세스

Which statement should be used when constructing queries in Carbon Black Audit and Remediation, Live Query?

• A.SELECT
• B.REMOVE
• C.UPDATE
• D.ALTER

App Control System Health email alerts for excessive agent backlog are occurring hourly. This is overwhelming the analysts, and they would like to reduce the notifications.
How can the analyst reduce the unneeded alerts?

• A.Set the email address for subscribers to an invalid email.
• B.Change reminder email to daily or disabled.
• C.Delete the alert.
• D.Disable the alert.

An administrator wants to find instances where the binary Is unsigned.
Which term will accomplish this search?

• A.process_publisher_state:FILE_SIGNATURE_STATE_NOT_SIGNED
• B.NOT process_publisher_state:FILE_SIGNATURE_STATE_SIGNED
• C.NOT process_publisher:FILE_SIGNATURE_STATE_SIGNED
• D.process_publisher:FILE_SIGNATURE_STATE_NOT_SIGNED

How can an analyst disregard alerts on multiple devices with the least amount of administrative effort?

• A.Select the "Dismiss on all devices" option.
• B.Search by hash and dismiss.
• C.Turn off the Group Alerts option.
• D.Make a note in the Notes/Tags option.

The security operations group is complaining that they are getting multiple App Control alerts for specific malicious files after they have banned the file.
Which step is necessary to prevent future alerts on these files?

• A.Set the Alert Status to Disabled.
• B.Edit the Malicious File Detected Alert. Select the criteria: Ignore already banned files.
• C.Edit the Malicious File Detected Alert. Select the criteria: Ignore already banned files and Ignore already approved files.
• D.Disable the Reminder Mail.