VMware Exam 5V0-93.22 Topic 3 Question 35 Discussion

Actual exam question for VMware's 5V0-93.22 exam

Question #: 35
Topic #: 3

An administrator needs to find all events on the Investigate page where the process is svchost.exe, and the path is not the standard path of C:\Windows\System32.

Which advanced search will yield these results?

Aprocess_name:svchost.exe EXCLUDE process_name:C\:\\Windows\\System32

Bprocess_name:svchost.exe AND NOT process_name:C:\Windows\System32

Cprocess_name:svchost.exe AND NOT process_name:C\:\\Windows\\System32

Dprocess_name:svchost.exe EXCLUDE process_name:C:\Windows\System32

Show Suggested Answer

Suggested Answer: C

by Kimbery at Feb 06, 2025, 08:34 PM

Limited Time Offer

25%

19 days ago

Option C looks good to me. The AND NOT condition should exclude the standard path as required.

upvoted 0 times

...