Online Access Free 5V0-91.20 Practice Test

Which strategy should be used to purge inactive bans from the web console?

• A.Schedule an add-hoc cron job to remove
• B.Run the cbbannlng script on the EDR server
• C.Use a pre-configured system cron job daily to remove them
• D.Go to the hashes page on the web console and remove them

An administrator runs the following query in Audit and Remediation:
SELECT *
FROM users
WHERE UID >= 500;
How long will this query stay active and accept data from the sensors?

• A.7 days
• B.14 days
• C.30 days
• D.1 day

Which actions are available for Permissions?

• A.Allow, Allow & Log, Bypass
• B.Approve, Upload, No Upload
• C.Performs any Operation, Runs or is running
• D.Deny Operation, Terminate Process

An administrator is searching for any child processes of email clients with this query in Carbon Black Enterprise EDR:
parent_name:outlook.exe OR parent_name:thunderbird.exe OR parent_name:eudora.exe The administrator would like to modify this query to only show child processes that do not have a known reputation in the Carbon Black Cloud.
Which search field can be added to the query to show the desired results?

• A.process_privileges
• B.process_reputation
• C.process_cloud_reputation
• D.process_integrity_level

Which identifier is shared by all events when an alert is investigated?

• A.Event ID
• B.Priority Score
• C.Process ID
• D.Alert ID