Broadcom-VMware
5V0-91.20 · Question #16
An analyst is investigating an alert within Enterprise EDR. The alert is tied to an unusual process name. When navigating to the binary details page for the binary used in the alert, the analyst…
The correct answer is B. The path. See the full explanation below for the reasoning.
Question
An analyst is investigating an alert within Enterprise EDR. The alert is tied to an unusual process name. When navigating to the binary details page for the binary used in the alert, the analyst sees the following: The analyst wants to find any instances of this process executing more than 30 days. Which two details from the binary can be used to search for the application regardless of the seen name? (Choose two.)
Options
- AThe binary's hash
- BThe path
- CThe original filename
- DThe product version
- EThe publisher name
How the community answered
(23 responses)- A4% (1)
- B87% (20)
- C4% (1)
- D4% (1)
Community Discussion
No community discussion yet for this question.