Exam ID HP0-M210P
Exam type Performance based exams
Exam duration 23 hour(s)
Exam length 200 questions
Passing score 75%
Delivery languages English
Related Certifications
Supporting courses These recommended courses help you prepare for the exam
Additional study materials
  • Documentation on Protect724
  • ArcSight ESM Install Guide
  • ArcSight ESM Admin Guide
  • ArcSight ESM 101 Guide
  • ArcSight ESM Upgrade Guide
  • Connector Appliance Admin Guide
  • Logger Admin Guide

Register for this Exam

This exam is a proctored, private exam administered over three days. Click on the link above for additional information and registration

During the exam, you can make specific comments about the exam and items. HP welcomes these comments as part of our continuous improvement process. No online or hard copy reference material will be allowed at the testing site. This exam may contain beta test items for experimental purposes.

Exam description

Designing and Implementing HP ArcSight Solution Practical exam tests the ability to plan, install, configure and implement a complex ArcSight enterprise solution.
This certification exam is designed for candidates with “on the job” experience. The associated training courses, which include hands-on activities, provide a foundation. However, real world working experience along with the recommended courses is needed in order to pass the exam.

Who should take this exam?

This Master ASE level exam is intended for experienced IT security experts with multi-product configuration, integration and practical deployment methodologies for ArcSight Solutions.

Exam contents

This exam has 200 questions. Here are types of questions to expect:
  • Other
  • Hands on

Tips for taking this exam

This exam is a proctored, private exam administered over three days. 
This exam assess whether you have the knowledge and skills to design and implement an HP ArcSight solution. Therefore, exam activities present a scenario which outlines a particular environment or problem in which specific tasks are to be completed within ESM, Logger and the Connector Applianc.
 
Before asking for your exam to be scored, check and double-check your work.  Once the proctor begins scoring, you will be graded on the current state of your configuration so please do not ask to be graded until you are sure you have tested your setup.  Do not proceed to the next step until you are told to do so, as you may undo your prior work before the proctor has a change to grade your work.

Objectives

This exam is a hands-on, task-driven, multi-step exam. Here are the types of tasks to expect:
5%

Design of an ArcSight Enterprise solutions based on a given scenario

10%

nstall ArcSight Solutions
 

  • ESM 6.0c  Install
  • ESM 6.5c  Install
  • Logger Install
  • Connector Appliance Install
  • Connector Installation

10%

Configure ArcSight Solutions
 

  • SmartConnector SYSLOG multiple destinations configuration (ESM 60 and Logger)
  • Forwarding Connector from ESM 6.0 to Logger
  • Logger Forwarder to ESM

10%

FlexConnector Development

  • FlexConnector  development (categorization and parser)

5%

Describe the Network model
 

  • Design of Network and Asset models
  • Asset Import Connector

10%

Perform Logger operations
 

  • Searches
  • Reports

20%

ESM Content Development
 

  • Active Channels, Filters and Field Sets
  • Variables
  • Data monitors and Dashboards
  • Rules
  • Reports

10%

Upgrade ArcSight
 

  • ESM 6.0 to 6.5
  • ESM Forwarding Connector
  • SmartConnector AUP

10%

Perform Advanced Configuration
 

  • Aggregation
  • Overrides

10%

Troubleshooting

  • Find and correct issues with ArcSight solution