nerdexam
Broadcom-VMware

5V0-91.20 · Question #38

An administrator is searching for any child processes of email clients with this query in Carbon Black Enterprise EDR: parent_name:outlook.exe OR parent_name:thunderbird.exe OR…

The correct answer is B. process_reputation. See the full explanation below for the reasoning.

Question

An administrator is searching for any child processes of email clients with this query in Carbon Black Enterprise EDR: parent_name:outlook.exe OR parent_name:thunderbird.exe OR parent_name:eudora.exe The administrator would like to modify the query to only show child processes that do not have a known reputation in the Carbon Black Cloud. Which search field can be added to the query to show the desired results?

Options

  • Aprocess_integrity_level
  • Bprocess_reputation
  • Cprocess_privileges
  • Dprocess_cloud_reputation

How the community answered

(48 responses)
  • A
    13% (6)
  • B
    77% (37)
  • C
    6% (3)
  • D
    4% (2)

Community Discussion

No community discussion yet for this question.

Full 5V0-91.20 Practice