VMware Carbon Black App Control Administrator

This one-day course teaches you how to use the VMware Carbon Black® App Control™ product and leverage the capabilities to configure and maintain the system according to their organization's security posture and organizational policies. This course provides an in-depth, technical understanding of the Carbon Black App Control product through comprehensive coursework and hands-on scenario-based labs.

Product Alignment

• VMware Carbon Black App Control

There are no prerequisites for this course.

By the end of the course, you should be able to meet the following objectives:

• Describe the components and capabilities of application control
• Manage and configure the Carbon Black App Control server based on organizational requirements
• Create policies to control enforcement levels and agent functionality
• Implement rules to support the organization's security posture
• Use the Carbon Black App Control tools to understand agent and server data

Course Introduction

• Introductions and course logistics
• Course objectives

Login Accounts and Groups

• User accounts
• User roles

Policies

• Modes and Enforcement Levels
• Rule sets

Notifiers

• Agent side display notification use

Computer Details

• View agent information
• Related views

Local Approval Timed Policy Override

• Use case and functionality

Software Approvals

• Methods and use cases

Custom Rules

• Rule type and use cases

Tools

• Meters and Alerts

Events

• Agent and server events

Baseline Drift

• Changes in a baseline