Learn with VMware : 5V0-91.20 training material for 100% pass

Review the following search:
childproc_name:"rundll32.exe" AND -digsig_result:"Signed" AND path:c:\windows\* What is this search looking for?

• A. Instances of rundll32.exe running out of the windows directory that are not signed
• B. Processes being launched by rundll32.exe running out of the windows directory that are not signed
• C. Processes launching rundll32.exe running out of the windows directory that are not signed
• D. Instances of rundll32.exe running out of the windows directory that are signed

At which three frequencies may a Carbon Black Audit and Remediation administrator schedule the run of Live Queries? (Choose three.)

• A. Bi-Weekly
• B. Monthly
• C. Any frequency
• D. Daily
• E. Weekly
• F. Hourly

How long will Live Queries in Carbon Black Audit and Remediation run before timing out?

• A. 7 days
• B. 14 days
• C. 30 days
• D. 180 days

An Endpoint Standard administrator finds a binary in the environment and decides to manually add the file hash to the Banned List.
Which reputation does the file now have?

• A. Company Black
• B. Adware/PUP Malware
• C. Known Malware
• D. Suspect/Heuristic Malware

Level 3 service desk personnel have been approved to modify computer enforcement levels by security governance.
Which set of steps is required to implement this change?

• A. Assign permission "Temporary assign computers" to each user.
• B. Create new user role, map AD group to role, assign permission "Manage computers" to role.
• C. Create new user role, map AD group to role, assign permission "Temporary assign computers" to role.
• D. Create new user role, assign permission "Manage computers" to role.