Online Access Free 5V0-91.20 Exam Questions

In which two ways can the tamper protection on an App Control agent be disabled when diagnosing agent issues or removing the agent? (Choose two.)

• A.From the File Catalog page on the web console
• B.From the Computer Details page on the web console
• C.Run authenticated DasCLI on Windows command prompt
• D.Run RepCLI on Windows command prompt
• E.From the Files on Computers page on the web console

Which statement should be used when constructing queries in Carbon Black Audit and Remediation, Live Query?

• A.ALTER
• B.REMOVE
• C.UPDATE
• D.SELECT

Review the following query:
path:c:\program\ files\ \(x86\)\microsoft
How would this query input term be interpreted?

• A.c:rogram files (x86)icrosoft
• B.c:\program files x86\microsoft
• C.c:rogramfilesx86icrosoft
• D.c:\program files (x86)\microsoft

An administrator runs the following query in Audit and Remediation:
SELECT *
FROM users
WHERE UID >= 500;
How long will this query stay active and accept data from the sensors?

• A.1 day
• B.30 days
• C.7 days
• D.14 days

An Enterprise EDR administrator wants to use Watchlists curated by VMware Carbon Black and other threat intelligence specialists.
How should the administrator add these curated Watchlists from the Watchlists page?

• A.Click Add Watchlists, on the Subscribe tab select the desired Watchlists, and click Subscribe.
• B.Click Take Action, and select Subscribe for the desired Watchlists.
• C.Click Add Watchlists, and input the URL(s) for the desired Watchlists.
• D.Click Take Action, select Edit, and select the desired Watchlists.