Carbon Black App Control maintains an inventory of all interesting (executable) files on endpoints where the agent is installed.

What is the initial inventory procedure called, and how can this process be triggered?

A. Inventorying; enable Discovery mode

B. Baselining; install the agent

C. Discovery; place agent into Disabled mode

D. Initialization; move agent out of Disabled mode

What is the maximum number of binaries (hashes) that can be banned using the web console?

A. 500

B. 600

C. 300

D. 400

Which Sensor Status under Endpoint Health indicates that a system's policy enforcement is disabled, and the sensor is not sending security event data to the cloud?

A. Quarantined

B. Deregistered

C. Inactive

D. Bypass

Which actions are available for Permissions?

A. Approve, Upload, No Upload

B. Deny Operation, Terminate Process

C. Allow, Allow and Log, Bypass

D. Performs any Operation, Runs or is running

An administrator observes the following event detail in the Investigate tab for an application with an unknown reputation making network connections:

Upon further review of the event details returned, the reputation is observed as NOT_LISTED, and the applied (cloud) reputation is UNKNOWN.

Why is the applied (cloud) reputation UNKNOWN and not NOT_LISTED?

A. The sensor demoted the local reputation from UNKNOWN to NOT_LISTED based on the coud reputation.

B. NOT_LISTED was applied by the sensor after observing no cloud reputation, as evidenced by the applied cloud reputation UNKNOWN.

C. The application was UNKNOWN at the time of the event but then later determined to be NOT_LISTED.

D. The sensor demoted the local reputation from NOT_LISTED to UNKNOWN based on the cloud reputation.