VMware Carbon Black Portfolio Skills: 5V0-91.20

Which statement filters data to only return rows where the publisher of the software includes VMware anywhere in the name?

A. WHERE publisher = "%VMware%"

B. WHERE publisher = "%VMware"

C. WHERE publisher LIKE "VMware%"

D. WHERE publisher LIKE "%VMware%"

Review the following query:

path:c:\program\ files\ \(x86\)\microsoft

How would this query input term be interpreted?

A. c:\program files x86\microsoft

B. c:rogram files (x86)icrosoft

C. c:rogramfilesx86icrosoft

D. c:\program files (x86)\microsoft

An analyst has investigated multiple alerts on a number of HR workstations and found that java.exe is

attempting to PowerShell. Of the Windows workstations in question, the analyst has also found that Java is

installed in multiple locations.

The analyst needs to block java.exe from this type of operation.

Which rule meets this need?

A. **/java.exe --> Invokes an untrusted process --> Terminate process

B. **/Program Files/*/java.exe--> Invokes an untrusted process --> Deny operation

C. **\Program Files\*\java.exe --> Invokes a command interpreter --> Terminate process

D. **\java.exe --> Invokes a command interpreter --> Deny operation