Question 26
An administrator has configured a terminate rule to prevent an application from running. The administrator wants to confirm that the new rule would have prevented a previous execution that had been observed.
Which feature should the administrator leverage for this purpose?
Which feature should the administrator leverage for this purpose?
Question 27
A security administrator is tasked to investigate an alert about a suspicious running process trying to modify a system registry.
Which components can be checked to further inspect the cause of the alert?
Which components can be checked to further inspect the cause of the alert?
Question 28
An administrator needs to create a search, but it must exclude "system.exe".
How should this task be completed?
How should this task be completed?
Question 29
Where can a user identify whether a sensor's signature pack is out-of-date in VMware Carbon Black Cloud?
Question 30
A security administrator needs to remediate a security vulnerability that may affect the sensors. The administrator decides to use a tool that can provide interaction and remote access for further investigation.
Which tool is being used by the administrator?
Which tool is being used by the administrator?