Broadcom-VMware
5V0-91.20 · Question #38
An administrator is searching for any child processes of email clients with this query in Carbon Black Enterprise EDR: parent_name:outlook.exe OR parent_name:thunderbird.exe OR…
The correct answer is B. process_reputation. See the full explanation below for the reasoning.
Question
An administrator is searching for any child processes of email clients with this query in Carbon Black Enterprise EDR: parent_name:outlook.exe OR parent_name:thunderbird.exe OR parent_name:eudora.exe The administrator would like to modify the query to only show child processes that do not have a known reputation in the Carbon Black Cloud. Which search field can be added to the query to show the desired results?
Options
- Aprocess_integrity_level
- Bprocess_reputation
- Cprocess_privileges
- Dprocess_cloud_reputation
How the community answered
(48 responses)- A13% (6)
- B77% (37)
- C6% (3)
- D4% (2)
Community Discussion
No community discussion yet for this question.