Is this exam completely free?

ExamCademy offers a free preview for every exam, covering around 20% of the total questions. Full access to all questions is available for free by signing up for an account. Optional supporters unlock AstroTutor (AI tutor) and advanced study modes.

Can I practice IT certification exams from Microsoft, AWS, or CompTIA?

Yes! ExamCademy supports a wide range of IT certification exams including Microsoft Azure, AWS Cloud Practitioner, and CompTIA A+ and Security+.

How accurate are the mock exams?

Our practice questions are community-created and moderator-reviewed to align with realistic exam objectives, style, and difficulty.

5V0-93-22 by VMware - Page 1 | ExamCademy

Mode Selection

Sort:

Question 1

Question 2

Question 3

Question 4

Question 5

Question 6

Question 7

Question 8

Question 9

Question 10

Question 11

Question 12

That's the end of the Preview

Create a free account to unlock all questions for this exam.

Log In / Sign Up

Page 1 of 3 • Questions 1-25 of 56

1 2 3

→

Know a question that should be here? Contribute to this exam

What connectivity is required for VMware Carbon Black Cloud Endpoint Standard to perform Sensor Certificate Validation?

A TCP/443 to GoDaddy OCSP and CRL URLs (crl.godaddy.com and ocsp.godaddy.com)
B TCP/80 to GoDaddy OCSP and CRL URLs (crl.godaddy.com and ocsp.godaddy.com)
C TCP/443 to GoDaddy CRL URL (crl.godaddy.com and ocsp.godaddy.com)
D TCP/80 to GoDaddy CRL URL (crl.godaddy.com and ocsp.godaddy.com)

An administrator is investigating an alert and reads a summary that says:
The application powershell.exe was leveraged to make a potentially malicious network connection.
Which action should the administrator take immediately to block that connection?

A Click Delete Application
B Click Quarantine Asset
C Click Export Alert
D Click Drop Connection

Is it possible to search for unsigned files in the console?

A Yes, by using the search:NOT process_publisher_state:FILE_SIGNATURE_STATE_SIGNED
B No, it is not possible to return a query for unsigned files.
C Yes, by using the search:process_publisher_state:FILE_SIGNATURE_STATE_UNSIGNED
D Yes, by looking at signed and unsigned executables in the environment and seeing if another difference can be found, thus locating unsigned files in the environment.

Which statement is true regarding Blocking/Isolation rules and Permission rules?

A Blocking & Isolation rules are overridden by Upload Rules.
B Permission Rules are overridden by Blocking & Isolation rules.
C Upload Rules are overridden by Blocking & Isolation rules.
D Blocking & Isolation rules are overridden by Permission Rules.

The VMware Carbon Black Cloud Sensor is not able to establish connectivity to the VMware Carbon Black Cloud Content Management URL over the standard SSL port TCP/443.
Which port, if any, will be the tailback?

A TCP/54443
B TCP/80
C TCP/8443
D It will not fallback and fail.

An administrator wants to be notified when particular Tactics, Techniques, or Procedures (TTPs) are observed on a managed endpoint.
Which notification option must the administrator configure to receive this notification?

A Alert that crosses a threshold with the "observed" option selected
B Alert that includes specific TTPs
C Alert for a Watchlist hit
D Policy action that is enforced with the "deny" opt ion selected

An administrator wants to block an application by its path instead of reputation. The following steps have already been taken:
Go to Enforce > Policies > Select the desired policy >
Which additional steps must be taken to complete the task?

A Click Enforce > Add application path name
B Scroll down to the Permissions section > Click Add application path > Enter the path of the desired application
C Scroll down to the Blocking and Isolation section > Click Edit (pencil icon) for the desired Reputation
D Scroll down to the Blocking and Isolation section > Click Add application path > Enter the path of the desired application

Which command is used to immediately terminate a current Live Response session?

A kill
B detach -q
C delete
D execfg

A user downloaded and executed malware on a system. The malware is actively exfiltrating data.
Which immediate action is recommended to prevent further exfiltration?

A Check Security Advisories and Threat Research contents.
B Place the device in quarantine.
C Run a background scan.
D Request upload of the file for analysis.

What are the highest and lowest file reputation priorities, respectively, in VMware Carbon Black Cloud?

A Priority 1: Ignore, Priority 11: Unknown
B Priority 1: Unknown, Priority 11: Ignore
C Priority 1: Known Malware, Priority 11: Common White
D Priority 1: Company Allowed, Priority 11: Not Listed/Adaptive White

An administrator wants to find information about real-world prevention rules that can be used in VMware Carbon Black Cloud Endpoint Standard.
How can the administrator obtain this information?

A Refer to an external report from other security vendors to obtain solutions.
B Refer to the TAU-TIN's on the VMware Carbon Black community page.
C Refer to the VMware Carbon Black Cloud sensor install guide.
D Refer to VMware Carbon Black Cloud user guide.

The administrator has configured a permission rule with the following options selected:
Application at path: C:\Program Files**
Operation Attempt: Performs any operation

Action: Bypass -
What is the impact, if any, of using the wildcards in the application at path field?

A Executable files in the "Program Files" directory and subdirectories will be ignored.
B Executable files in the "Program Files" directory will be blocked.
C Executable files in the "Program Files" directory will be logged.
D Executable files in the "Program Files" directory will be subject to blocking rules.