VMWare-5V0-91.20-VMware Carbon Black Portfolio Skills Free Practice Test — 30 Questions

Question 1

Mr. Thompson, an IT administrator, notices unusual network activity originating from several endpoints in the company\'s network. After analyzing the alerts, he suspects a potential security breach. What should Mr. Thompson do next?

Accepted Answer

Conduct further investigation to confirm the security breach.

Question 2

What is the primary purpose of application whitelisting and blacklisting in cybersecurity?

Accepted Answer

To restrict access to specific applications based on predefined criteria.

Question 3

Ms. Rodriguez is responsible for managing software inventory and updates in her organization. She receives notification of a critical security patch for a widely-used software application. However, applying the patch requires temporarily shutting down critical systems during business hours. What should Ms. Rodriguez do in this situation?

Accepted Answer

Schedule the patch installation during non-business hours to minimize disruption.

Question 4

What is the purpose of monitoring and auditing application usage in an organization?

Accepted Answer

To identify and mitigate security risks associated with unauthorized application usage.

Question 5

Mr. Parker, a cybersecurity analyst, is responsible for configuring audit policies and settings to meet compliance requirements in his organization. During an audit, it is discovered that some endpoints were not properly configured to log security events. What action should Mr. Parker take to address this issue?

Accepted Answer

Investigate the root cause of the configuration issue and rectify it promptly.

Question 6

What is the primary objective of implementing application control policies in an organization\'s cybersecurity strategy?

Accepted Answer

To prevent unauthorized execution of malicious or unapproved applications.

Question 7

Ms. Lee, an IT administrator, is tasked with performing system audits and generating reports to assess the effectiveness of security controls in her organization. During the audit, she discovers that several endpoints have outdated antivirus definitions and are vulnerable to known threats. What should Ms. Lee prioritize in response to this finding?

Accepted Answer

Immediately update antivirus definitions on all endpoints to mitigate the vulnerability.

Question 8

What is the role of configuration and policy management in cybersecurity?

Accepted Answer

To define and enforce security settings and controls across IT systems and endpoints.

Question 9

Mr. Chang, a security analyst, is responsible for analyzing and interpreting alerts generated by the organization\'s security systems. He receives an alert indicating multiple failed login attempts from an unknown IP address on a critical server. What should Mr. Chang do in response to this alert?

Accepted Answer

Investigate the failed login attempts to determine if they are part of a potential security breach.

Question 10

How does application control contribute to the principle of least privilege in cybersecurity?

Accepted Answer

By restricting users' access to only the applications necessary for their job roles.

Question 11

Mr. Patel, an IT administrator, notices unusual network activity on several endpoints within the organization\'s network. Upon investigation, he discovers potential signs of a sophisticated cyber-attack targeting sensitive data. What should Mr. Patel prioritize as the initial step in response to this incident?

Accepted Answer

Isolating affected endpoints from the network.

Question 12

Ms. Rodriguez, a cybersecurity analyst, is tasked with enhancing the organization\'s threat hunting capabilities. While reviewing historical data, she identifies patterns of suspicious behavior indicating the presence of advanced persistent threats (APTs). What technique can Ms. Rodriguez employ to proactively detect and mitigate APTs within the network?

Accepted Answer

Implementing behavioral analysis to detect anomalous activities.

Question 13

Mr. Thompson, a system administrator, is responsible for configuring security policies for virtualized environments in the organization. He wants to implement a policy that restricts unauthorized software installations on virtual machines (VMs). Which configuration should Mr. Thompson enforce to achieve this objective?

Accepted Answer

Enabling application whitelisting on VMs.

Question 14

Ms. Lee, a security analyst, is investigating a security incident involving a suspected data breach in the organization\'s virtualized environment. During the investigation, she discovers evidence of lateral movement by the attacker across different VMs. What action should Ms. Lee prioritize to mitigate the risk of further exploitation by the attacker?

Accepted Answer

Implementing network micro-segmentation to isolate VMs.

Question 15

Mr. Nguyen, an IT security manager, is evaluating remediation strategies to address vulnerabilities identified during a recent security assessment of the organization\'s virtualized environment. He prioritizes patching critical vulnerabilities to mitigate the risk of exploitation. Which approach should Mr. Nguyen adopt to effectively manage and deploy patches across the virtualized infrastructure?

Accepted Answer

Implementing a centralized patch management system.

Question 16

Ms. Garcia, a cybersecurity analyst, is tasked with conducting threat hunting activities to proactively identify potential security risks within the organization\'s IT environment. While analyzing network traffic logs, she observes patterns indicative of a possible reconnaissance activity by an external threat actor. What technique should Ms. Garcia employ to further investigate and validate this potential threat?

Accepted Answer

Conducting packet capture and analysis for network reconnaissance.

Question 17

Ms. Khan, a system administrator, is responsible for securing the organization\'s virtualized environment against emerging threats. She wants to implement a proactive approach to threat detection and response. Which technique should Ms. Khan prioritize to detect and mitigate unknown threats within the virtualized infrastructure?

Accepted Answer

Implementing machine learning-based anomaly detection.

Question 18

Mr. Davis, a cybersecurity analyst, is investigating a security incident involving suspicious activities detected on several virtualized servers within the organization\'s data center. During the investigation, he identifies unauthorized modifications to critical system files on the affected servers. What action should Mr. Davis prioritize to contain the impact of the incident and restore system integrity?

Accepted Answer

Reverting to a previous backup of the affected servers.

Question 19

Ms. Patel, an IT security manager, is evaluating workload security measures to protect critical applications and data hosted in the organization\'s virtualized environment. She wants to implement controls to prevent data exfiltration in the event of a security breach. Which approach should Ms. Patel prioritize to enhance data protection within the virtualized infrastructure?

Accepted Answer

Encrypting data at rest and in transit within VMs.

Question 20

Mr. Thompson, a security analyst at a multinational corporation, detects a potential security breach in the company\'s network during his routine analysis using VMware Carbon Black. Upon further investigation, he finds that a sophisticated malware variant has infiltrated several critical systems. What should Mr. Thompson do next?

Accepted Answer

Isolate the affected systems from the network and notify the incident response team.

Question 21

In a large-scale virtualized environment integrated with VMware vSphere, the security team is tasked with monitoring and managing workload security. Which of the following best describes an effective strategy for this scenario?

Accepted Answer

Implementing automated security policies to continuously monitor and enforce security configurations.

Question 22

Ms. Rodriguez, a cybersecurity analyst, is responsible for leveraging threat intelligence feeds to enhance the organization\'s security posture. Which of the following statements accurately reflects the role of threat intelligence in this context?

Accepted Answer

Threat intelligence feeds provide real-time information on emerging threats and adversary tactics.

Question 23

Dr. Smith, a seasoned threat hunter, is conducting a proactive investigation using VMware Carbon Black to identify potential security threats within the organization\'s network. During the analysis, he notices anomalous behavior patterns indicating a potential advanced persistent threat (APT) campaign. What should Dr. Smith prioritize in this situation?

Accepted Answer

Collect and analyze additional data to confirm the presence of the APT.

Question 24

As part of a routine evaluation of security operations center (SOC) processes, Ms. Brown, a cybersecurity manager, identifies a gap in incident response procedures related to VMware Carbon Black integration. Which of the following steps should Ms. Brown prioritize to address this gap?

Accepted Answer

Conducting a comprehensive review of existing incident response playbooks.

Question 25

Ms. Garcia, a threat analyst, is tasked with analyzing threat data collected by VMware Carbon Black to identify potential security incidents. While reviewing the data, she notices a significant increase in the number of alerts related to suspicious file executions on endpoints. Which of the following actions should Ms. Garcia prioritize based on this observation?

Accepted Answer

Investigate the root cause of the suspicious file executions and assess their impact.

Question 26

Mr. Lee, a cybersecurity analyst, is conducting a threat hunting exercise using VMware Carbon Black to proactively identify potential security threats within the organization\'s network. Which of the following strategies aligns with best practices for effective threat hunting?

Accepted Answer

Leveraging behavioral analytics to identify abnormal patterns and anomalies.

Question 27

Dr. Hernandez, the incident response lead, is reviewing the organization\'s incident response protocol to ensure alignment with industry best practices. During the review, she identifies a lack of predefined roles and responsibilities for handling incidents involving VMware Carbon Black. Which of the following steps should Dr. Hernandez take to address this gap?

Accepted Answer

Establishing a cross-functional incident response team with designated roles and responsibilities.

Question 28

Mr. Anderson, a systems administrator, is configuring security policies for a new set of virtual machines (VMs) within the organization’s VMware vSphere environment. He needs to ensure that these VMs are protected against advanced threats while maintaining optimal performance. Which of the following approaches should Mr. Anderson take?

Accepted Answer

Implement a baseline security policy and gradually enhance it based on risk assessments.

Question 29

Ms. Patel, a cybersecurity engineer, is integrating multiple threat intelligence feeds into VMware Carbon Black to enhance threat detection capabilities. She notices that the volume of alerts has significantly increased, leading to alert fatigue among the security operations center (SOC) analysts. What should Ms. Patel do to address this issue?

Accepted Answer

Implement an alert prioritization system to focus on high-severity threats.

Question 30

Ms. Wilson, a security analyst, is using VMware Carbon Black to conduct a threat hunt across her organization\'s network. She identifies several endpoints exhibiting unusual outbound network traffic to an unfamiliar domain. To optimize her threat hunt, what should Ms. Wilson\'s next step be?

Accepted Answer

Conduct deeper analysis to determine if the domain is associated with malicious activity.

VMWare-5V0-91.20-VMware Carbon Black Portfolio Skills Free Practice Test — 30 Questions

A lot more is already mapped out

About the VMWare-5V0-91.20-VMware Carbon Black Portfolio Skills Certification