5V0-91.20 무료 덤프문제 온라인 액세스

What is the meaning, if any, of the event Report write (removable media)?

• A.This event would never occur. App Control does not report activity on removable media.
• B.A Policy's device control setting 'Block writes to unapproved removable media' is set to Report Only. The event details show the process and file name modified or deleted on the unapproved removable media.
• C.A Policy's device control setting 'Block writes to unapproved removable media' is set to Enabled. The event details show the process, file name, and hash modified or deleted on the removable media.
• D.A Policy's device control setting 'Block writes to unapproved removable media' is set to Report Only. The event details show the process, file name, and hash modified or deleted on the removable media.

A watchlist generates a false positive on the Triage Alerts page, so the watchlist must be updated.
How should this task be accomplished?

• A.Open the process analysis page and select the Add Watchlist Exclusion option from the Actions menu.
• B.Open the Watchlist Page and click the pencil button associated with the watchlist.
• C.One can update watchlists directly on the Triage Alerts Page using the pencil icon.
• D.One can update watchlists from the Process Search Page.

Which two statements are true about Carbon Black alerts? (Choose two.)

• A.Once dismissed, the action cannot be undone.
• B.They are stored for 15 days.
• C.They can be grouped together.
• D.Once received, it can be dismissed in bulk.
• E.Carbon Black does not generate alerts.

An administrator has configured a policy to run a standard background scan.
How long does this one-time scan take to complete on endpoints assigned to that policy?

• A.180 days
• B.1 day
• C.30 days
• D.3-5 days

Review the following EDR query:
parent_name:outlook.exe AND -alliance_score_srstrust:* AND -digsig_result: "Signed' Which process would show in the query results?

• A.Processes invoked by outlook.exe that have an SRS Trust value and that are digitally signed.
• B.Processes invoked by outlook.exe that do not have an SRS Trust value and that are not digitally signed.
• C.Processes invoking outlook.exe that do not have an SRS Trust value and that are not digitally signed.
• D.Processes invoking outlook.exe that have an SRS Trust value and that are not digitally signed.