COURSE INTRODUCTION
Introductions and course logistics
Course objectives
VMWARE CARBON BLACK CLOUD INTEGRATIONS
Describe the integration capabilities with VMware Carbon Black Cloud
Determine integration use cases for VMware Carbon Black Cloud
Identify required components for integrating VMware Carbon Black Cloud
Differentiate VMware Carbon Black Cloud integration vendors
VMWARE CARBON BLACK CLOUD SYSLOG INTEGRATION
Describe the function of the Syslog Connector
Generate API and SIEM keys from the Cloud console
Validate a successful Syslog integration
Describe how to automate the Syslog Connector
Troubleshoot problems with the Syslog integration
USING POSTMAN
Explain the concept and purpose of an API
Interpret common REST API Status codes
Recognize the difference between platform and product APIs
Using the Postman Client to initiate API calls
Create a custom access level and respective API key
Create a valid API request
USING THE VMWARE CARBON BLACK CLOUD PYTHON SDK
Install the VMware Carbon Black Cloud Python SDK
Describe the different authentication methods
Evaluate the best authentication method for a given task
AUTOMATING OPERATIONS
Automate basic Incident Response tasks using the VMware Carbon Black Cloud SDK and API
Automate basic watchlist interactions using the VMware carbon Black Cloud SDK and API
SENSOR INSTALLATION TROUBLESHOOTING
Describe sensor install log collection process
Identify sensor install log parameters
Create a detailed sensor install log
Locate sensor install logs on an endpoint
Interpret sensor install success from an install log
Determine likely cause for install failure using sensor logs
Propose resolution steps for a given sensor install failure
VMWARE CARBON BLACK CLOUD CONSOLE TROUBLESHOOTING
Identify sensor bypass status reasons
Simplify console data exports using search
Describe differences in Audit Log detail levels
Locate built-in browser tools
Gather console diagnostics logs from a browser
Review console diagnostics logs
SENSOR OPERATIONS TROUBLESHOOTING
Identify available types of diagnostic logs
Gather appropriate diagnostic logs for a given issue
Identify steps for resolving software interoperability problems
Identify steps for resolving resource problems
Identify steps for resolving network problems
Audience
Experienced security administrators and security analysts who are already familiar with VMware Carbon Black Cloud.
Language
English
Prerequisites
Before taking this course, you should have completed the VMware Carbon Black Cloud: Plan and Deploy course.
You should also have the following understanding or knowledge:
Good understanding of managing and working with various Linux and Windows operating systems
Knowledge and working experience of security operations
VMware Exam Voucher
- Vouchers are non-refundable and non-returnable.
- One voucher is applicable towards one exam.
- All vouchers, including any retakes, are valid for 12 months.
- Certification exam retirement dates supersede voucher expiration dates.
- Visit the VMware website for certification exam information.
Why VMware Training
VMware certified professionals are proven problem solvers. They support today’s core technologies from security to networking to virtualization and more. VMware is the industry standard for launching IT careers into today’s digital world.
VMware is the only industry recognized credential with performance testing to prove pros can think on their feet to perform critical IT support tasks. It is trusted by employers around the world to identify the go-to person in end point management & technical support roles. VMware appears in more tech support job listings than any other IT credential.
Looking VMware Training & Certifications?
Our top priority is our customer, so if you ever have a concern, question or comment please contact us and we will be more than happy to assist you to answer all your questions. We’ve helped thousands of students just like you, and they love every minute of it.