VMware Carbon Black App Control Administrator

This one-day course teaches you how to use the VMware Carbon Black® App Control™ product and leverage the capabilities to configure and maintain the system according to their organization’s security posture and organizational policies. This course provides an in-depth, technical understanding of the Carbon Black App Control product through comprehensive coursework and hands-on scenario-based labs.

Objectives

By the end of the course, you should be able to meet the following objectives:

• Describe the components and capabilities of application control
• Manage and configure the Carbon Black App Control server based on organizational requirements
• Create policies to control enforcement levels and agent functionality
• Implement rules to support the organization’s security posture
• Use the Carbon Black App Control tools to understand agent and server data

Intended Audience

System administrators, security operations personnel including analyst and managers.

Prerequisites

There are no prerequisites for this course.

Product Alignment

• VMware Carbon Black App Control

Course Outline

1 Course Introduction

• Introductions and course logistics
• Course objectives

2 Login Accounts and Groups

• User accounts
• User roles

3 Policies

• Modes and Enforcement Levels
• Rule sets

4 Notifiers

• Agent side display notification use

5 Computer Details

• View agent information
• Related views

6 Local Approval Timed Policy Override

• Use case and functionality

7 Software Approvals

• Methods and use cases

8 Custom Rules

• Rule type and use cases

9 Tools

• Meters and Alerts

10 Events

• Agent and server events

11 Baseline Drift

• Changes in a baseline