VMware VMware Certifications 1V0-81.20 Questions & Answers

• Question 41:

  VMware's Intrinsic Security layer includes functionality for which control points?

  A. networks, workloads, endpoints, identity, and clouds

  B. applications, workloads, devices, identity, virtual infrastructure

  C. networks, containers, devices, users, and VMware Cloud

  D. applications, users, networks, data center perimeter, vSphere

  Correct Answer: A

  Reference: https://www.globalknowledge.com/en-gb/resources/articles/what-is-intrinsic-security

• Question 42:

  Which three Workspace ONE UEM capabilities are used to configure security policies on Windows 10 desktops? (Choose three.)

  A. Application Profiles

  B. Custom XML

  C. Custom Attributes

  D. Baselines

  E. Native Profiles

  Correct Answer: BCD

• Question 43:

  A technician has been asked to confirm a specific browser extension does not exist on any endpoint in their environment. Which is the VMware Carbon Black tool to use for this task?

  A. Enterprise EDR

  B. EDR

  C. Audit and Remediation

  D. Endpoint Standard

  Correct Answer: A

• Question 44:

  Which of the following is true about VMware Carbon Black Cloud Enterprise EDR watchlists?

  A. They only update annually

  B. You cannot customize them

  C. They are made up of reports

  D. Each watchlist is user specific

  Correct Answer: D

  Reference: https://docs.vmware.com/en/VMware-Carbon-Black-EDR/7.5/VMware%20Carbon%20Black%20EDR%207.5%20User%20Guide.pdf

• Question 45:

  Which two are true about a VMware Service-defined Firewall? (Choose two.)

  A. A firewall that allows you to use 3rd party features like IDS/IPS, threat protection, anti-bot, and anti-virus solutions

  B. A firewall that blocks external access into your internal network based on IP services

  C. A firewall that enforces policy for North-South traffic

  D. A firewall that is auto scalable as new workloads are deployed

  E. A firewall that provides East-West protection between internal applications

  Correct Answer: AE

  Reference: https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/products/vmware-nsx-service-defined-firewall.pdf

• Question 46:

  Which four alert filters are available in the VMware Carbon Black Cloud Investigate page? (Choose four.)

  A. Watchlist

  B. Target Value

  C. Policy

  D. Security Alert List

  E. Effective Reputation

  F. Alert Severity

  Correct Answer: ABCF

• Question 47:

  Which is a common solution to implement for inbound network attacks?

  A. Load Balancer

  B. Firewall

  C. Proxy

  D. Reverse Proxy

  Correct Answer: B

• Question 48:

  Refer to the exhibit.

  

  From the VMware Carbon Black Cloud console, what page do you go to after clicking the Non-Malware bar in the Potentially Suspicious Activity chart?

  A. Notifications page with the selected alert filtered

  B. Reputations page with the selected reputation filtered

  C. Investigate page with the selected reputation filtered

  D. Alerts page with the selected alert filtered

  Correct Answer: D

  Reference: https://docs.vmware.com/en/VMware-Carbon-Black-Cloud/services/carbon-black-cloud-user-guide.pdf (15)

• Question 49:

  Refer to the exhibit.

  

  Which statement is true about the firewall rule?

  A. It is a gateway firewall applied to a Tier-0 gateway that drops traffic on port 22

  B. It is a distributed firewall applied to App-Services, DB-Servers and Web-Servers that rejects traffic on port 22

  C. It is a distributed firewall applied to App-Services, DB-Servers and Web-Servers that drops traffic on port 22

  D. It is a gateway firewall applied to a Tier-0 gateway that rejects traffic on port 22

  Correct Answer: A

• Question 50:

  Which three are industry best practices of Zero Trust framework? (Choose three.)

  A. Employee machines need to have a passcode profile setup

  B. Employee machines on Internal network are trusted and have access to all internal resources

  C. Employee machines are checked for compliance before they get access to applications

  D. Employees are not required to provide MFA to access internal resources over VPN

  E. Employees get access to only the required resources to get their job done

  Correct Answer: ACE