HP ATP - ArcSight ESM 6.5 Administrator V1

This certification validates that you can administer an HP ArcSight ESM installation, including the following:
• Identify functions of ArcSight ESM components and perform steps to verify status and restart component services
• Illustrate ArcSight connector basics
• Identify primary types of storage in ESM and key components of event storage area, and understand retention policies
• Describe how to use the ArcSight Console and how to configure the console preferences, and navigate within ESM resources
• Depict how to use the Web Management Console to manage users and the CORR Engine
• Identify files/folders that need to be backed up
• Understand ESM authentication mechanisms and guidelines
• Perform core ArcSight ESM administrative tasks
• Identify stock content dashboards
• Illustrate how to manage connectors
• Describe basic event management tasks
• Identify basic troubleshooting tools, logs, and processes

Why earn this certification?

  • To prove and reinforce your practical experience through certification
  • To be an asset to your company by helping reduce or eliminate security breaches
  • To showcase highly desired skills in your CV/resume
  • To gain an advantage in the security jobs market


Typical candidates for this certification include system administrators tasked with routine administration tasks within ArcSight ESM such as ESM user management, SSL certificate administration, and data backups.

Skill level


Steps to acquire this certification

Before you begin:

Acquire access to The Learning Center and get an HP Learner ID. Then create a profile with Pearson VUE, our exam delivery vendor.
Learn how in the Learning Center Assist Kit.

Step 1: Do you qualify for an upgrade path?

There are no upgrade paths available for this certification.

Step 2: Register or apply for this certification

Step 3: Verify or complete prerequisites

There are no prerequisites required for this certification. Please move to Step 4.

Step 4: Complete recommended training

Training is highly recommended to pass each exam. Training is not required, but it will help prepare you for the exams and increase your chances of passing the exams.

Training for Exam HP0-M68: ArcSight ESM v6 Security Administrator
00893626 ArcSight ESM Administrator 6 CORR Engine [AEIA] 4 days SCA Register
WBT = Web Based       ILT = Instructor Led       VILT = Virtual Instructor Led       VCR - Virtual Class Recorded       SCA = Special Course or Activity

Step 5: Pass the required exams

Complete 1 of the following exams:
HP0-M68 ArcSight ESM v6 Security Administrator Register

Certification achieved

You will receive an email notification 2-5 days after successfully completing all requirements. In addition, your status in The Learning Center will change to "acquired". Track your training and certification progress through your transcripts in The Learning Center.