5V0-93.22 試験問題を無料オンラインアクセス

An administrator is working in a development environment that has a policy rule applied and notices that there are too many blocks. The administrator takes action on the policy rule to troubleshoot the issue until the blocks are fixed.
Which action should the administrator take?

• A.Unenforce
• B.Disable
• C.Delete
• D.Recall

The use of leading wildcards in a query is not recommended unless absolutely necessary because they carry a significant performance penalty for the search.
What is an example of a leading wildcard?

• A.filemod:system32/ntdll.dll*
• B.filemod:*/system32/ntdll.dll
• C.filemod:system32/ntdll.dll
• D.filemod:system32/*ntdll.dll

An administrator has determined that the following rule was the cause for an unexpected block:
[Suspected malware] [Invokes a command interpreter] [Terminate process] All reputations for the process which was blocked show SUSPECT_MALWARE.
Which reputation was used by the sensor for the decision to terminate the process?

• A.Effective reputation
• B.Initial Cloud reputation
• C.Actioned reputation
• D.Current Cloud reputation

An administrator wants to block ransomware in the organization based on leadership's growing concern about ransomware attacks in their industry.
What is the most effective way to meet this goal?

• A.Turn on the performs ransomware-like behavior rule in the policies.
• B.Start in the monitored policy until it is clear that no attacks are happening.
• C.Recognize that analytics will automatically block the attacks that may occur.
• D.Look at current attacks to see if the software that is running is vulnerable to potential ransomware attacks.

Where can a user identify whether a sensor's signature pack is out-of-date in VMware Carbon Black Cloud?

• A.Enforce > Inventory > Endpoints > Policy
• B.Inventory > Endpoints > Sensor Update Status
• C.Inventory > Endpoints > Device Name
• D.Enforce > Investigate > Sensors > Details