At which three frequencies may a Carbon Black Audit and Remediation administrator schedule the run of Live Queries? (Choose three.)A . MonthlyB . DailyC . Bi-WeeklyD . WeeklyE . HourlyF . Any frequencyView AnswerAnswer:...
An analyst has investigated two alerts on two separate HR workstations and found that notepad.exe has established communication to another IP address. Which rule will kill notepad.exe entirely if this activity is detected in...
An administrator needs to manage a group of sensors from within the console. Which three actions are available for sensors within the Sensor Group? (Choose three.)A . Move to groupB . DisableC . RestartD...
An Enterprise EDR administrator wants to use Watchlists curated by VMware Carbon Black and other threat intelligence specialists. How should the administrator add these curated Watchlists from the Watchlists page?A . Click Add Watchlists,...
A Carbon Black Cloud analyst needs to identify the Internet Explorer extensions installed on Windows endpoints. Which Live Query statement will successfully query these items?A . SELECT * FROM registry JOIN ie_extensions;B . SELECT...
An analyst navigates to the alerts page in Endpoint Standard and sees the following: What does the yellow color represent on the left side of the row?A . It is an alert from a...
What are the three available methods in VMware Carbon Black App Control by which an endpoint (agent) can be assigned to a specific policy? (Choose three.)A . By pushing the designated GPO scriptB ....
What does the Aggressive setting do when configured in Local Scan Settings?A . It adds a temporary reputation.B . It scans all files on execution.C . It scans new files on first execution.D ....
An administrator needs to check configurations using Audit across several policies and locations within the organization. How can the administrator run the query to only these specific devices?A . Specify endpoints on the query...
Review the following EDR query: parent_name:outlook.exe AND -alliance_score_srstrust:* AND -digsig_result: "Signed' Which process would show in the query results?A . Processes invoked by outlook.exe that have an SRS Trust value and that are digitally...
