Vendors

This one-day course teaches you how to use the advanced features of the VMware Carbon Black® EDR™ product. This usage includes gaining access to the Linux server for management and troubleshooting in addition to configuring integrations and using the API. This course provides an in-depth, technical understanding of the Carbon Black EDR product through comprehensive coursework and hands-on scenario-based labs. This class focuses exclusively on advanced technical topics related to the technical back-end configuration and maintenance.
img-course-overview.jpg

What You'll Learn

By the end of the course, you should be able to meet the following objectives:
  • Describe the components and capabilities of the Carbon Black EDR server 
  • Identify the architecture and data flows for Carbon Black EDR communication 
  • Identify the architecture for a cluster configuration and Carbon Black EDR cluster communication 
  • Describe the Carbon Black EDR server data types and data locations 
  • Use the API to interact with the Carbon Black EDR server without using the UI 
  • Create custom threat feeds for use in the Carbon Black EDR server 
  • Perform the integration with a syslog server 
  • Use different server-side scripts for troubleshooting 
  • Troubleshoot sensor-side configurations and communication

Who Should Attend

System administrators and security operations personnel, including analysts and managers
img-who-should-learn.png

Prerequisites

This course requires completion of the following course:
  • VMware Carbon Black EDR Administrator

Learning Journey

Coming Soon...

1 Course Introduction
  • Introductions and course logistics 
  • Course objectives

2 Architecture
  • Data flows and channels 
  • Sizing considerations 
  • Communication channels and ports

3 Server Datastores
  • SOLR database 
  • Storage configurations and data aging 
  • Partition states 
  • Postgres 
  • Modulestore

4 EDR API
  • CBAPI overview 
  • Viewing API calls in the browser 
  • Utilizing the API to access data

5 Threat Intelligence Feeds
  • Feed structure 
  • Report indicator types 
  • Custom threat feed creation and addition

6 Syslog Integration 
  • SIEM support 
  • Configuration

7 Troubleshooting
  • Server-side scripts 
  • Server logs 
  • Sensor operations

Frequently Asked Questions (FAQs)

  • Why get VMware certified?

    VMware certifications validate your skills and expertise in virtualization and cloud technologies, making you a valuable asset in the IT industry.

    These certifications demonstrate your ability to design, deploy, and manage complex VMware environments, enhancing your career prospects and earning potential.

    VMware-certified professionals are highly sought after by employers worldwide, as they possess the knowledge and skills to drive digital transformation and optimize IT infrastructure.

  • What to expect for the examination?

    VMware offers a variety of certification exams at different levels (VCTA, VCP, VCAP, VCDX) and across various technology tracks (Data Center Virtualization, Network Virtualization, Cloud Management and Automation, etc.).

    Exams typically consist of multiple-choice and scenario-based questions that assess your knowledge and ability to apply it in real-world situations.

    Note: Certification requirements and policies may be updated by VMware from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.

  • How long is VMware certification valid for?

    As of April 2019, VMware has removed the mandatory recertification requirement for VCP certifications.

    This means your VCP certification will not expire, and you are not required to recertify at any specific interval.

    However, VMware encourages individuals to recertify and upgrade their certifications to validate their continued expertise and stay current with the latest technologies.

    Note: Certification requirements and policies may be updated by VMware from time to time. We apologize for any discrepancies; do get in touch with us if you have any questions.

  • Why take this course with Trainocate?

    Here’s what sets us apart:

    - Global Reach, Localized Accessibility: Benefit from our geographically diverse training hubs in 16 countries (and counting!).

    - Top-Rated Instructors: Our team of subject matter experts (with high average CSAT and MTM scores) are passionate to help you accelerate your digital transformation.

    - Customized Training Solutions: Choose from on-site, virtual classrooms, or self-paced learning to fit your organization and individual needs.

    - Experiential Learning: Dive into interactive training with our curated lesson plans. Participate in hands-on labs, solve real-world challenges, and take on comprehensive assessments.

    - Learn From The Best: With 30+ authorized training partnerships and countless awards from Microsoft, AWS, Google – you're guaranteed learning from the industry's elite.

    - Your Bridge To Success: We provide up-to-date course materials, helpful exam guides, and dedicated support to validate your expertise and elevate your career.

Keep Exploring

Course Curriculum

Course Curriculum

Training Schedule

Training Schedule

Exam & Certification

Exam & Certification

FAQs

Frequently Asked Questions

img-improve-career.jpg

Improve yourself and your career by taking this course.

img-get-info.jpg

Ready to Take Your Business from Great to Awesome?

Level-up by partnering with Trainocate. Get in touch today.

Name
Email
Phone
I'm inquiring for

Inquiry Details

By providing your contact details, you agree to our Privacy Policy.