VMware Carbon Black App Control Administrator -On Demand

This course, equivalent to 1 day of training, teaches you how to use the VMware Carbon Black® App Control™ product and leverage the capabilities to configure and maintain the system according to their organization’s security posture and organizational policies. This course provides an in-depth, technical understanding of the Carbon Black App Control product through comprehensive coursework and hands-on scenario-based labs.

This course is also available in an Instructor-Led Training (ILT) format.

Objectives

By the end of the course, you should be able to meet the following objectives:

• Describe the components and capabilities of application control
• Manage and configure the Carbon Black App Control server based on organizational requirements
• Create policies to control enforcement levels and agent functionality
• Implement rules to support the organization’s security posture
• Use the Carbon Black App Control tools to understand agent and server data

Intended Audience

System administrators, security operations personnel including analyst and managers.

Prerequisites

There are no prerequisites for this course.

Product Alignment

• VMware Carbon Black App Control

Course Outline

1 Course Introduction

• Introductions and course logistics
• Course objectives

2 Login Accounts and Groups

• User accounts
• User roles

3 Policies

• Modes and Enforcement Levels
• Rule sets
• Software Approvals
• Notifiers

4 Computer Details

• View agent information
• Related views
• Local Approval

5 Custom Rules

• Rule type and use cases
• Software Approvals

6 Tools

• Meters and Alerts

7 Events

• Agent and server events

8 Baseline Drift

• Changes in a baseline