Résumé du cours
This one-day course teaches you how to use the VMware Carbon Black® App Control™ product and leverage the capabilities to configure and maintain the system according to their organization’s security posture and organizational policies. This course provides an in-depth, technical understanding of the Carbon Black App Control product through comprehensive coursework and hands-on scenario-based labs.
Product Alignment
- VMware Carbon Black App Control
Moyens d'évaluation :
- Évaluations formatives pendant la formation, à travers les travaux pratiques réalisés sur les labs à l’issue de chaque module
- Évaluation sous forme de questionnaire à l’issue de la formation
A qui s'adresse cette formation
System administrators, security operations personnel including analyst and managers.
Pré-requis
There are no prerequisites for this course.
Objectifs
By the end of the course, you should be able to meet the following objectives:
- Describe the components and capabilities of application control
- Manage and configure the Carbon Black App Control server based on organizational requirements
- Create policies to control enforcement levels and agent functionality
- Implement rules to support the organization’s security posture
- Use the Carbon Black App Control tools to understand agent and server data
Contenu
Course Introduction
- Introductions and course logistics
- Course objectives
Login Accounts and Groups
- User accounts
- User roles
Policies
- Modes and Enforcement Levels
- Rule sets
Notifiers
- Agent side display notification use
Computer Details
- View agent information
- Related views
Local Approval Timed Policy Override
- Use case and functionality
Software Approvals
- Methods and use cases
Custom Rules
- Rule type and use cases
Tools
- Meters and Alerts
Events
- Agent and server events
Baseline Drift
- Changes in a baseline
Moyens Pédagogiques :