EXAM NUMBER : 5V0-91.20
PRODUCT : Carbon Black
EXAM LANGUAGE : English
Associate Certifications : VMware Carbon Black EndPoint Protection 2021
EXAM OVERVIEW
The VMware Carbon Black Portfolio Skills exam badge validates candidate’s knowledge on how to use the capabilities of the products according to the organization’s security posture and organizational policies.
Exam Info
Duration : 150
Number of Questions : 60
Passing Score : 300 Learn more
Format : Single and Multiple Choice, Proctored
Exam Details
The VMware Carbon Black Portfolio Skils (5V0-91.20), which leads to VMware Carbon Black EndPoint Protection 2021is a 60-item exam, with a passing score of 300 using a scaled method. Exam time is 150minutes.
Exam Delivery
This is a proctored exam delivered through Pearson VUE. For more information, visit the Pearson VUE website
Certification Information
For details and a complete list of requirements and recommendations for attainment, please reference the VMware Education Services – Certification web site.
Minimally Qualified Candidate
The minimally qualified candidate(MQC) has experience with VMware Carbon Black and Is able to administrate and operationalize, manageand configure the product to meet their organization’s goals. The MQC also uses the capability of the product and leverages the tool’s capabilities to achieve the organization’s security goals.
The MQC should have all the knowledge contained in the associated pre-requisite courses and exam sections listed below.
Exam Sections
If a section is missing from the list below, please note it is because the exam has no testable objectives for that section. The objective numbering may be referenced in your score report at the end of your testing event for further preparation should a retake of the exam be necessary.
Section 1 –Introduction –There are no testable objectives for this section
Section 2 -VMware Products and Solutions
Objective 2.1: Given a scenario about App Control user accounts with privileges, identify how they should be assigned.
Objective 2.2: Identify the characteristics of enforcement levels in App Control.
Objective 2.3: Given an App Control use case, identify the enforcement level that should be used.
Objective 2.4: Given an App Control use case, identify computers that meet the specified state or condition.
Objective 2.5: Give a scenario about managing an endpoint, identify how to accomplish this with App Control.
Objective 2.6: Given an App Control use case, identify the required rule type that should be used.
Objective 2.7: Given a scenario where alerting is needed, identify the criterion that should be configured in App Control.
Objective 2.8: Given an event in App Control, identify the components, the event type, or the meaning of the event.
Section 3 -VMware Carbon Black EDR
Objective 3.1: Identify the EDR components and dataflows.
Objective 3.2: Given a scenario, identify how to manage and configure EDR Sensor groups.
Objective 3.3: Given a scenario including a search in EDR, identify what is being searched for.
Objective 3.4: Given a scenario including a graphic in EDR, analyze the data given.
Objective 3.5: Identify the characteristic of a binary search and banning binaries in EDR.
Objective 3.6: Identify characteristicsthat impact search performance in EDR.
Objective 3.7: Identify how and when to use and configure feeds in EDR.
Objective 3.8: Identify how to create and review watchlists I EDR.
Objective 3.9: Given a scenarioabout an alert, identify the proper response mechanismin EDR.
Section 4 -VMware Carbon Black Cloud Endpoint Standard
Objective 4.1: Identify the communication process and requirements for Sensor to server comms in Endpoint Standard.
Objective 4.2: Givena scenario including a search in Cloud Endpoint including results, analyze the results.
Objective 4.3: Identify characteristics of policy-centered components and sensor options in Cloud Endpoint.
Objective 4.4: Identify the characteristics of permissions and blocking and isolation rules for Cloud Endpoint.
Objective 4.5: Identify the impact of reputation on rules in Cloud Endpoint.
Objective 4.6: Identify the structure of an alert in Cloud Endpoint.
Objective 4.7: Given a scenario about an alert including the investigation and triage pages, identify the components of the alert in Cloud Endpoint.
Objective 4.8: Given a scenario about an alert, identify how to respond using a Cloud Endpoint response option.
Section 5 -VMware Carbon Black Cloud Enterprise EDR
Objective 5.1: Given a scenarioincluding a watchlist, identify the components of the watchlist in Cloud Enterprise EDR.
Objective 5.2: Identify the structure of an alert in Cloud Enterprise EDR.
Objective 5.3: Given a scenario about an alert including the process and binary analysis pages, identify the components of the alert in Cloud Enterprise EDR.
Objective 5.4: Given a scenario about an environment, and an example and a goal, identify the query that should be created to accomplish the goal.
Objective 5.5: Given a scenario about an alert, identify how to respond using a Cloud Enterprise EDR response option.
Section 6 -VMware Carbon Black Cloud Audit and Remediation
Objective 6.1: Identify how to perform basic queries with OSQuery in Cloud Audit and Remediation.
Objective 6.2: Given a query, identify the framework or structure of the query in Cloud Audit and Remediation.
Objective 6.3: Given a query from the UI, identify its function and interpret the results for Cloud Audit and Remediation.
Objective 6.4: Given a scenario about Cloud Audit and Remediation, identify the components in OS query statements.
Objective 6.5: Identify how to exclude data from results using Where statements in Cloud Audit and Remediation.
Objective 6.6: Given a scenario, identify the type of query that should be used for Cloud Audit and Remediation.
Objective 6.7: Given a scenario including the requirement for a specific result, identify how to use Advanced SQL components to achieve the results.
Objective 6.8: IdentifyCloud Audit Live Response capabilities, limitations, and features.
Recommended Courses
VMware Carbon Black Portfolio: Configure and Manage
Actualkey VMware 5V0-91.20 Exam pdf, Certkingdom VMware 5V0-91.20 PDF
Best VMware 5V0-91.20 Certification, VMware 5V0-91.20 Training at certkingdom.com