Broadcom-VMware
5V0-91.20 · Question #99
An analyst has investigated multiple alerts on a number of HR workstations and found that java.exe is attempting to PowerShell. Of the Windows workstations in question, the analyst has also found…
The correct answer is C. **Program Files/**java.exe -> Invokes a command interpreter -> Terminate process. See the full explanation below for the reasoning.
Question
An analyst has investigated multiple alerts on a number of HR workstations and found that java.exe is attempting to PowerShell. Of the Windows workstations in question, the analyst has also found that Java is installed in multiple locations. The analyst needs to block java.exe from this type of operation. Which rule meets this need?
Options
- A**java.exe -> Invokes an untrusted process -> Terminate process
- B**Program Files/**java.exe -> Invokes an untrusted process -> Deny operation
- C**Program Files/**java.exe -> Invokes a command interpreter -> Terminate process
- D**java.exe -> Invokes a command interpreter -> Deny operation
How the community answered
(52 responses)- A10% (5)
- B4% (2)
- C83% (43)
- D4% (2)
Community Discussion
No community discussion yet for this question.