Create custom log sources to utilize events from uncommon sources
Create, maintain, and use reference data collections
Develop and manage custom rules to detect unusual activity in your network
Develop and manage custom action scripts to for automated rule reponse
Develop and manage anomoly detection rules to detect when unusual network traffic patterns occur
IT security fundamentals
Log files and events
You should also have completed the IBM QRadar SIEM Foundations course.
Security technical architects
Professional services using QRadar SIEM
QRadar SIEM administrators
IBM Security QRadar enables you to minimize the time gap between when a suspicious activity occurs and when you detect it. Attacks and policy violations leave their footprints in log events and network flows of your IT systems. To connect the dots, QRadar SIEM correlates these scattered events and flows into offenses that alert you to suspicious activities. Using the skills taught in this course, you will be able to configure processing of uncommon events, work with reference data, and develop custom rules, custom actions, and custom anomaly detection rules.
The lab environment for this course uses the IBM QRadar SIEM 7.3 platform.
IBM QRadar SIEM V7.3.2 Deployment
BQ203 will not adequately help you prepare for the test. It can, however, be used as a supplement to the first self-study course.
A tanfolyamon a hallgatók elsajátíthatják a számítógépes hálózatok tervezését és üzemeltetését biztonsági szempontból.
Learn basic concepts and develop skills necessary to administer IT security fundamental tasks.
Validate and enhance your skills and optimally manage Check Point advanced security management systems.
The Designing HPE Hybrid IT Rev. 19.21 course is design to teach students the intermediate level skills to plan, design, recommend, and demonstrate HPE Hybrid IT solutions and deliver a proof-of-concept for a given solution to a customer. The course is five days in duration and includes lectures and activities in the ratio of approximately 25/75 (lecture/activities). Activities include sizing exercises using tools available from sources such as the HPE Partner Portal and exercises using HPE emulators.
This course teaches students how to identify, recommend, and explain HPE Nimble storage solutions. It covers the HPE Nimble hardware and software, initial configuration, HPE Nimble Storage Volumes, snapshots, and replication.
The course uses participant centered learning and hands-on labs.
This course teaches students about HPE server architectures and associated technologies as well as their functions, features, and benefits. Additionally, students will learn about planning and designing HPE server solutions and positioning HPE server solutions to customers.
This course uses participant centered learning and hands-on emulators. Emulators use software to replicate HPE Server technologies and allow learners to engage in lab activities using web based resources.
The Engineering Cisco Meraki Solutions Part 1 (ECMS1) v1.1 is a one-day course that equips students with the knowledge and skills to confidently operate Cisco Meraki deployments. This instructor-led course includes live demos and guided lab practice. Students will learn how to implement core configurations for a full stack solution in the Meraki Dashboard and how to leverage essential Meraki Dashboard tools for troubleshooting.
After completing this course, you should be able to perform the following tasks:
Describe how QRadar SIEM collects data to detect suspicious activities
Describe the QRadar SIEM component architecture and data flows
Navigate the user interface
Investigate suspected attacks and policy violations
Search, filter, group, and analyze security data
Investigate events and flows
Investigate asset profiles
Describe the purpose of the network hierarchy
Determine how rules test incoming data and create offenses
Use index and aggregated data management
Navigate and customize dashboards and dashboard items
Create customized reports
Use AQL for advanced searches
Analyze a real world scenario
The Implementing and Administering Cisco Solutions (CCNA) v1.0 course gives you a broad range of fundamental knowledge for all IT careers. Through a combination of lecture and hands-on labs, you will learn how to install, operate, configure, and verify basic IPv4 and IPv6 networks. The course covers configuring network components such as switches, routers, and wireless LAN controllers; managing network devices; and identifying basic security threats. The course also gives you a foundation in network programmability, automation, and software-defined networking.
This course teaches you how to implement and operate enterpriselevel Aruba campus switching solutions. Hand-on labs give you experience with ArubaOS-Switches, including securing access, redundancy technologies such as Multiple Spanning Tree Protocol (MSTP), link aggregation techniques including Link Aggregation Protocol (LACP) and switch virtualization with HPE’s Virtual Switching Framework (VSF). You will also learn to configure dynamic routing with Open Shortest Path First (OSPF) and Border Gateway Protocol (BGP), network optimization via Quality of Service (QoS), IP multicast routing leveraging Protocol Independent Multicast (PIM), and protecting the network using Access Control Lists (ACLs). This course is approximately 30% lecture and 70% hands on lab exercises.
This course teaches the HPE OneView 5.X infrastructure management solution and is the supporting training course for the exam requirement in the certification HPE Product Certified - OneView .
Topics covered in this course include:
• HPE OneView architectural model
• Product features and functions
• How to configure
• How to recommend and demonstrate