5V0-91.20 試験問題を無料オンラインアクセス

An Enterprise EDR administrator has created a custom Watchlist and wants to add a custom query to a report in the custom Watchlist.
From which page can the administrator add this custom query?

• A.Policies
• B.Watchlists
• C.Cloud Analysis
• D.Investigate

Refer to the exhibit:

Which two statements are true about Carbon Black Live Response (CBLR)? (Choose two.)

• A.A CBLR session is not attached.
• B.A CBLR session is established.
• C.CBLR is enabled.
• D.CBLR is disabled.
• E.A CBLR session already exists.

An administrator is troubleshooting App Control agent issues. When navigating to the Computer Details page, the administrator sees the following:

What is the status of the WINDOWS-CLIENT agent?

• A.Disconnected and Up to date
• B.Connected and Up to date
• C.Connected but unsupported
• D.Connected but health check failed

An administrator runs the following query in Audit and Remediation:
SELECT *
FROM users
WHERE UID >= 500;
How long will this query stay active and accept data from the sensors?

• A.14 days
• B.1 day
• C.30 days
• D.7 days

An administrator is searching for any child processes of email clients with this query in Carbon Black Enterprise EDR:
parent_name:outlook.exe OR parent_name:thunderbird.exe OR parent_name:eudora.exe The administrator would like to modify this query to only show child processes that do not have a known reputation in the Carbon Black Cloud.
Which search field can be added to the query to show the desired results?

• A.process_privileges
• B.process_reputation
• C.process_cloud_reputation
• D.process_integrity_level