VMware Carbon Black Portfolio: Configure and Manage

Key Features

By the end of the course, you should be able to meet the following objectives: • Describe the components and capabilities of Carbon Black App Control. • Manage and configure the Carbon Black App Control server based on organizational requirements. • Create policies to control enforcement levels and agent functionality. • Implement rules to support the organization’s security posture. • Use the Carbon Black App Control tools to understand agent and server data. • Describe the components and capabilities of the Carbon Black EDR server. • Identify the architecture and data flows for Carbon Black EDR communication. • Describe the Carbon Black EDR server installation process. • Manage and configure the Carbon Black EDR server based on organizational requirements. • Perform searches across process and binary information. • Implement threat intelligence feeds and create watchlists for automated notifications. • Describe the different response capabilities available from the Carbon Black EDR server. • Use investigations to correlate data between multiple processes. • Describe the components and capabilities of Carbon Black Cloud Endpoint Standard. • Identify the architecture and data flows for VMware Carbon Black Cloud products. • Perform searches across endpoint data to discover suspicious behavior. • Manage the Carbon Black Cloud Endpoint Standard rules based on organizational requirements. • Configure rules to address common threats. • Evaluate the impact of rules on endpoints. • Process and respond to alerts. • Describe the different response capabilities available from VMware Carbon Black Cloud. • Describe the components and capabilities of Carbon Black Cloud Enterprise DR. • Perform searches across endpoint data to discover suspicious behavior. • Manage watchlists to augment the functionality of Carbon Black Cloud Enterprise EDR. • Create custom watchlists to detect suspicious activity in your environment. • Describe the process for responding to alerts in Carbon Black Cloud Enterprise EDR. • Discover malicious activity within Carbon Black Cloud Enterprise EDR. • Describe the different response capabilities available from VMware Carbon Black Cloud. • Describe the components and capabilities of Carbon Black Cloud Audit and Remediation. • Describe the use case and functionality of recommended queries. • Achieve a basic knowledge of SQL. • Describe the elements of a SQL query. • Evaluate the filtering options for queries. • Perform basic SQL queries on endpoints. • Describe the different response capabilities available from VMware Carbon Black Cloud.