Online Access Free 5V0-91.20 Exam Questions

Which reputation has the highest priority in Cloud Endpoint Standard?

• A.Adware/PUP Malware
• B.Ignore
• C.Known Malware
• D.Unknown

An active compromise is detected on an endpoint. Due to current policies, the compromise was detected but not terminated.
What would be an appropriate action to end the current communication between the device and the attacker?

• A.Remotely scan the endpoint
• B.Place the system into bypass mode
• C.Uninstall the sensor
• D.Place the system into Quarantine

A company wants to implement the strictest security controls for computers on which the software seldom changes (i.e., servers or single-purpose systems).
Which Enforcement Level is the most fitting?

• A.Low Enforcement
• B.None (Visibility)
• C.Medium Enforcement
• D.High Enforcement

An analyst is investigating an alert within Enterprise EDR. The alert is tied to an unusual process name. When navigating to the binary details page, for the binary used in the alert, the analyst sees the following:

The analyst wants to find any instances of this process executing regardless of the process name used.
Which two details from the binary can be used to search for the application regardless of the seen name? (Choose two.)

• A.The original filename
• B.The product version
• C.The path
• D.The publisher name
• E.The binary's hash

How can an analyst disregard alerts on multiple devices with the least amount of administrative effort?

• A.Select the "Dismiss on all devices" option.
• B.Turn off the Group Alerts option.
• C.Search by hash and dismiss.
• D.Make a note in the Notes/Tags option.