Broadcom-VMware
5V0-91.20 · Question #52
Examine the following EDR query: file_desc:"Windows Command Processor" AND -process_name:cmd.exe Which process will show in the query results?
The correct answer is A. Any process named something other than cmd.exe with the file description of "Windows Command Processor". See the full explanation below for the reasoning.
Question
Examine the following EDR query:
file_desc:"Windows Command Processor" AND -process_name:cmd.exe
Which process will show in the query results?
Options
- AAny process named something other than cmd.exe with the file description of "Windows Command Processor"
- BAny process with the binary file description "Windows Command Processor"
- CAny process with the binary file description "Windows Command Processor" named cmd.exe
- DAny process named cmd.exe
How the community answered
(45 responses)- A71% (32)
- B4% (2)
- C9% (4)
- D16% (7)
Community Discussion
No community discussion yet for this question.