Broadcom-VMware
5V0-91.20 · Question #106
An Enterprise EDR administrator sees the process in the graphic on the Investigate page but does not see an alert for this process: How can the administrator generate an alert for future hits agains…
The correct answer is D. Select the watchlist on the watchlists page use Take Action to select Edit, and select Alert on hit. See the full explanation below for the reasoning.
Question
An Enterprise EDR administrator sees the process in the graphic on the Investigate page but does not see an alert for this process:
How can the administrator generate an alert for future hits agains this watchlist?
Options
- ASelect the watchlist on the watchlists page, select the Scheduled Task Created report, and use Take Action to select Alert on hit to On.
- BSelect the watchlist on the watchlists page, select the Scheduled Task Created report, and use Take Action to toggle Alert on hit to On.
- CSelect the watchlist on the watchlists page and click on Alerts: Off to toggle the alerts to On.
- DSelect the watchlist on the watchlists page use Take Action to select Edit, and select Alert on hit.
How the community answered
(21 responses)- A5% (1)
- B10% (2)
- C5% (1)
- D81% (17)
Community Discussion
No community discussion yet for this question.