<< Prev Question Next Question >>

Question 26/27

A recent application has been blocked using hash ban, which is an indicator that some users attempted an unexpected activity. Even though the activity was blocked, the security administrator wants to further investigate the attempt in VMware Carbon Black Cloud Endpoint Standard.
Which page should the administrator navigate to for a graphical view of the event?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (27q)
Question 1: An administrator needs to add an application to the Approved...
Question 2: An administrator is investigating an alert and reads a summa...
Question 3: An administrator needs to fully analyze the relevant informa...
Question 4: An administrator has configured a terminate rule to prevent ...
Question 5: The use of leading wildcards in a query is not recommended u...
Question 6: A security administrator is tasked to investigate an alert a...
Question 7: Where can a user identify whether a sensor's signature pack ...
Question 8: An administrator is tasked to create a reputation override f...
Question 9: What is a capability of VMware Carbon Black Cloud?...
Question 10: Is it possible to search for unsigned files in the console?...
Question 11: Which port does the VMware Carbon Black sensor use to commun...
Question 12: An administrator needs to make sure all files are scanned lo...
Question 13: What are the highest and lowest file reputation priorities, ...
Question 14: What is a security benefit of VMware Carbon Black Cloud Endp...
Question 15: The administrator has configured a permission rule with the ...
Question 16: In which tab of the VMware Carbon Black Cloud interface can ...
Question 17: An administrator is reviewing how event data is categorized ...
Question 18: An administrator wants to prevent malicious code that has no...
Question 19: An organization is implementing policy rules. The administra...
Question 20: An administrator would like to proactively know that somethi...
Question 21: Which statement is true regarding Blocking/Isolation rules a...
Question 22: An administrator is working in a development environment tha...
Question 23: An administrator has just placed an endpoint into bypass. Wh...
Question 24: An administrator wants to find information about real-world ...
Question 25: An administrator wants to block ransomware in the organizati...
Question 26: A recent application has been blocked using hash ban, which ...
Question 27: An administrator has determined that the following rule was ...