Broadcom-VMware
5V0-91.20 · Question #46
5V0-91.20 Question #46: Real Exam Question with Answer & Explanation
Sign in or unlock 5V0-91.20 to reveal the answer and full explanation for question #46. The question stem and answer options stay visible for context.
Question
An administrator observes the following event detail in the Investigate tab for an application with an unknown reputation making network connections:
Process name: tutor.exe Process ID: 6720 App reputation: NOT_LISTED App reputation implied: (cloud) UNKNOWN App MD5: 03e047f26c57f202a0107297d0210 App SHA: 10f144d4224025a657 Event ID: 01f1057d251a4fdb3a979c6da8b Category: Monitored Alert ID: 01802cb Alert severity: 3 RTPs: INTERNATIONAL_SITE, NETWORK_ACCESS, ADAPTIVE_WHITE, APP_ACTIVE_CLIENT
Upon further review of the event details returned, the reputation is observed as NOT_LISTED, and the applied (cloud) reputation is UNKNOWN. Why is the applied (cloud) reputation UNKNOWN and not NOT_LISTED?
Options
- AThe sensor demoted the local reputation from UNKNOWN to NOT_LISTED based on the cloud reputation.
- BNOT_LISTED was applied by the sensor after observing no cloud reputation, as evidenced by the applied cloud reputation UNKNOWN.
- CThe application was UNKNOWN at the time of the event but then later determined to be NOT_LISTED.
- DThe sensor demoted the local reputation from NOT_LISTED to UNKNOWN based on the cloud reputation.
Unlock 5V0-91.20 to see the answer
You've previewed enough free 5V0-91.20 questions. Unlock 5V0-91.20 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.