Given the following query:
SELECT hostname, cpu_type, cpu_brand, cpu_physical_cores, cpu_logical_cores, cpu_microcode, (1.0 * physical_memory / (1000*1000*1000)) AS physical_mem_gb, hardware_vendor, hardware_model, hardware_version, hardware_serial FROM system_info; Which statement Is correct?

• A. This query customizes the results returned by the system.
• B. This query combines data from several different tables.
• C. This query shows data from the physical_mem_gb column.
• D. This query is missing a filter option.

How long will Live Queries in Carbon Black Audit and Remediation run before timing out?

• A. 14 days
• B. 7 days
• C. 180 days
• D. 30 days

An administrator is reviewing an alert about a known and required application in the environment. The application has been given the reputation of PUP, with the alert reason being that the PUP was detected. As a result, this application is matching policy blocking & isolation rules for PUPs in the environment and Is not behaving as expected.
Which step should the administrator take to remediate this situation?

• A. Add the file to the Banned List and Delete application
• B. Add the file to the Approved List
• C. Add the file to the Approved List and Dismiss alert
• D. Dismiss the alert

An active compromise is detected on an endpoint. Due to current policies, the compromise was detected but not terminated.
What would be an appropriate action to end the current communication between the device and the attacker?

• A. Uninstall the sensor
• B. Remotely scan the endpoint
• C. Place the system into bypass mode
• D. Place the system into Quarantine

Which Sensor Status under Endpoint Health indicates that a system's policy enforcement is disabled, and the sensor is not sending security event data to the cloud?

• A. Quarantined
• B. Bypass
• C. Inactive
• D. Deregistered