Online Access Free 5V0-93.22 Exam Questions

Which scenario would qualify for the "Local White" Reputation?

• A.The file was signed using a trusted certificate.
• B.The hash was previously analyzed, AND it is not on any known good or bad lists.
• C.The file was added as an IT took
• D.The hash was not on any known good or known bad lists, AND the file is signed.

The administrator has configured a permission rule with the following options selected:
Application at path: C:\Users\*\Downloads\**
Operation Attempt: Performs any operation
Action: Bypass
What is the impact, if any, of using the wildcards in the path for this rule?

• A.No files will be ignored from the downloads directory.
• B.Any executable in the downloads directory for any user on the system will be bypassed for inspection.
• C.Any executable in the downloads directory will be prevented from executing.
• D.Any executable in the downloads directory for any user on the system will be logged and allowed to execute.

An administrator has determined that the following rule was the cause for an unexpected block:
[Suspected malware] [Invokes a command interpreter] [Terminate process] All reputations for the process which was blocked show SUSPECT_MALWARE.
Which reputation was used by the sensor for the decision to terminate the process?

• A.Actioned reputation
• B.Current Cloud reputation
• C.Initial Cloud reputation
• D.Effective reputation

An administrator needs to make sure all files are scanned locally upon execution.
Which setting is necessary to complete this task?

• A.On-Access File Scan Mode must be set to Aggressive.
• B.Allow Signature Updates must be enabled.
• C.Signature Update frequency must be set to 2 hours.
• D.Run Background Scan must be set to Expedited.

An administrator wants to prevent ransomware that has not been seen before, without blocking other processes.
Which rule should be used?

• A.[Adware or PUP] [Scrapes memory of another process] [Deny operation]
• B.[Not listed application] [Performs ransomware-like behavior] [Terminate process
• C.[Not listed application] [Runs or is running] [Terminate process]
• D.[Unknown malware] [Runs or is running] [Terminate process]