Broadcom-VMware
5V0-91.20 · Question #21
An analyst is investigating an alert within Enterprise EDR on the process analysis page. The process tree can be seen below: Which statement accurately characterizes this situation?
The correct answer is B. The solid line between the nodes denotes a process was injected into by another process. See the full explanation below for the reasoning.
Question
An analyst is investigating an alert within Enterprise EDR on the process analysis page. The process tree can be seen below: Which statement accurately characterizes this situation?
Options
- AConhost.exe has one or more child processes.
- BThe solid line between the nodes denotes a process was injected into by another process.
- CSeveral nodes in this process tree have watchlist hits.
- DThe analyst navigated to this process analysis page from the wscript.exe process.
How the community answered
(28 responses)- A11% (3)
- B79% (22)
- C7% (2)
- D4% (1)
Community Discussion
No community discussion yet for this question.