Broadcom-VMware
5V0-91.20 · Question #64
An Endpoint Standard analyst runs the following query in the graphic below: Which three statements are true from the results shown? (Choose three.)
The correct answer is A. The process is a PowerShell process running a scr pt with a .ps1 extension. D. The process had a NOT_LISTED reputation at the time the event occurred. F. The process was able to inject code into another process. See the full explanation below for the reasoning.
Question
An Endpoint Standard analyst runs the following query in the graphic below:
Which three statements are true from the results shown? (Choose three.)
Options
- AThe process is a PowerShell process running a scr pt with a .ps1 extension.
- BThe process has a threat score greater than 4.
- CThe process made a network connection to another system.
- DThe process had a NOT_LISTED reputation at the time the event occurred.
- EThe process was run under the NT_AUTHORITY\SYSTEM user context.
- FThe process was able to inject code into another process.
How the community answered
(64 responses)- A78% (50)
- B6% (4)
- C3% (2)
- E13% (8)
Community Discussion
No community discussion yet for this question.