Broadcom-VMware
5V0-91.20 · Question #72
5V0-91.20 Question #72: Real Exam Question with Answer & Explanation
Sign in or unlock 5V0-91.20 to reveal the answer and full explanation for question #72. The question stem and answer options stay visible for context.
Question
An administrator uses the following Enterprise EDR search query to show web browsers spawning nonbrowser child processes that connect over the network:
(parent_name:chrome.exe OR parent_name:iexplore.exe OR parent_name:firefox.exe) AND (NOT process_name:chrome.exe OR NOT process_name:iexplore.exe OR NOT process_name:firefox.exe)
Which field can be added to this query to filter the results by signature status?
Options
- Achildproc_publisher_state
- Bprocess_publisher
- Cchildproc_reputation
- Dprocess_publisher_state
Unlock 5V0-91.20 to see the answer
You've previewed enough free 5V0-91.20 questions. Unlock 5V0-91.20 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.