VMware 5V0-91.20 Actual Free Exam Questions & Community Discussion

Exam Code/Number: 5V0-91.20
Exam Name/Title: VMware Carbon Black Portfolio Skills
Certification Provider: VMware
Corresponding Certification: VMware Carbon Black EndPoint Protection 2021

Exam Questions: 115
Updated On: Oct 03, 2026

Question #17

Given an event rule: Approve nVidia Drivers, changes the local state to Approved for file writes or execution blocks when the publisher is NVIDIA Corporation.
How is an alert created that is triggered whenever an nVidia driver is approved by the event rule?

A. Click Create Alert on the event rule Approve nVidia Drivers details page. Add email recipients. Create and Exit.

B. Add a new Alert of type Event Alert. Set Subtype to New unapproved file to computer and Execution block (unapproved file) and Publisher to NVIDIA Corporation. Click Create and add email recipients.

C. Create a custom rule name Approve nVidia that approves writes or blocks when the publisher is NVIDIA Corporation. Create an alert for rule name Approve nVidia. Click Create and add email recipients.

D. Click Create Alert on the event rule Approve nVidia Drivers details page. Click Create and add email recipients. Create and Exit.

Discussion 0

Correct Answer: D Vote an answer

Question #18

An Enterprise EDR administrator has created a custom Watchlist and wants to add a custom query to a report in the custom Watchlist.
From which page can the administrator add this custom query?

A. Watchlists

B. Investigate

C. Cloud Analysis

D. Policies

Discussion 0

Correct Answer: B Vote an answer

Question #19

What is the maximum number of binaries (hashes) that can be banned using the web console?

A. 600

B. 500

C. 300

D. 400

Discussion 0

Correct Answer: C Vote an answer

Question #20

At which three frequencies may a Carbon Black Audit and Remediation administrator schedule the run of Live Queries? (Choose three.)

A. Hourly

B. Monthly

C. Weekly

D. Any frequency

E. Bi-Weekly

F. Daily

Discussion 0

Correct Answer: B,C,F Vote an answer

Question #21

Which wildcard configuration applies a policy to all files and subfolders in a specific folder in Endpoint Standard?

A. C:\Program Files\example\$$

B. C:\Program Files\example\$

C. C:\Program Files\example\*

D. C:\Program Files\example\**

Discussion 0

Correct Answer: D Vote an answer

Question #22

Refer to the exhibit, noting the circled red dot:

What is the meaning of the red dot under Hits in the Process Search page?

A. Whether the execution of the process resulted in a sensor hit

B. Whether the execution of the process resulted in a feed hit

C. Whether the execution of the process resulted in a syslog hit

D. Whether the execution of the process resulted in matching hits for different users

Discussion 0

Correct Answer: D Vote an answer

Question #23

A process is writing numerous interesting files that never actually execute.
Which rule type can the administrator define that will prevent reporting these file creations?

A. Expert (Tag Process, Terminate Process)

B. Performance Optimization

C. Execute Ignore

D. File Creation Control (Suppress)

Discussion 0

Correct Answer: B Vote an answer

Question #24

Management has directed that the SOC team be enabled to create global file bans via the App Control API.
How would this be configured in the App Control Console?

A. Add permission "Manage files" and create an API token for each SOC user.

B. Create a Role, map to the corresponding SOC group, add permission "Manage files", and create API token for the Role.

C. Create a Role, map it to the corresponding SOC group, add permission "Manage files" to Role, and create an API token for each user in group.

D. Create a Role, map to corresponding SOC group, and add permission "Manage files" to Role.

Discussion 0

Correct Answer: B Vote an answer

Download Free VMware 5V0-91.20 Demo

Simply submit your e-mail address below to get started with our free demo of your VMware 5V0-91.20 exam.