← Back to exam page

5V0-91.20 – VMware Carbon Black Portfolio Skills

Loading demo links...

Showing 7–9 of 10 questions

Question 7

Which statement should be used when constructing queries in Carbon Black Audit and Remediation, Live Query?

Select an option, then click Submit answer.

  • ○

    ALTER
  • ○

    UPDATE
  • ○

    REMOVE
  • ○

    SELECT
Question 8

An Enterprise EDR administrator wants to use Watchlists curated by VMware Carbon Black and other threat intelligence specialists.

How should the administrator add these curated Watchlists from the Watchlists page?

Select an option, then click Submit answer.

  • ○

    Click Add Watchlists, and input the URL(s) for the desired Watchlists.
  • ○

    Click Take Action, select Edit, and select the desired Watchlists.
  • ○

    Click Take Action, and select Subscribe for the desired Watchlists.
  • ○

    Click Add Watchlists, on the Subscribe tab select the desired Watchlists, and click Subscribe.
Question 9

An administrator is creating a query per policy for Audit and Remediation. The administrator ran several recommended queries already but notices they are unable to run the same recommended query for one of their policies. The run button is grayed out.

Which statement correctly explains why the run button is unavailable?

Select an option, then click Submit answer.

  • ○

    The sensors in the policy do not support the table or query.
  • ○

    The administrator needs the use live query permission.
  • ○

    The number of consecutive running queries is limited.
  • ○

    The query or table is not supported within osquery.