Exam ID HP0-M54
Exam type Proctored exam taken at dedicated testing center
Exam duration 1 hour 30 minutes
Exam length 60 questions
Passing score 72%
Delivery languages English
Related Certifications
Supporting courses These recommended courses help you prepare for the exam:
Additional study materials

Register for this Exam

You will need an HP Learner ID and a Pearson VUE login and password.

During the exam, you can make specific comments about the exam and items. HP welcomes these comments as part of our continuous improvement process.
No online or hard copy reference material will be allowed at the testing site. This exam may contain beta test items for experimental purposes.

Exam description

This exam tests your skills on ESM, event schema, event lifecycle, ESM console, active channels,filters, variables, dashboards and data monitors, rules, reports, query, viewers, ESM network model, workflows, cases, annotations, and
ArcSight Web.

Who should take this exam?

This exam is for Security Analysts who use ArcSight ESM to perform broad investigations of security data to identify activities that require further investigation or who perform advanced investigations of security incidents from operators and ArcSight’s advanced correlation
engine. Examples of job roles include:
  • ArcSight ESM operator
  • ArcSight ESM analyst
  • ArcSight ESM author
  • ArcSight ESM super user

Exam contents

This exam has 60 questions. Here are types of questions to expect:
  • Multiple choice (multiple responses)
  • Multiple choice (single response)

Tips for taking this exam

Recommended training to help prepare for this exam is accessible through ArcSight University.
You are not required to take the recommended, supported courses; and completion of training does not guarantee that you will pass the exam. HP strongly recommends a combination of training, thorough review of courseware and additional study references, and
sufficient on the job experience prior to taking the exam.

Objectives

This exam validates that you can successfully perform the following:
5%

ESM Overview

3%

Event Schema

8%

Event Lifecycle

3%

ESM Console

10%

Active Channels

10%

Filters

4%

Variables

10%

Dashboards and Data Monitors

10%

Rules

5%

Reports

5%

Query Viewers

12%

ESM Network Model

10%

Workflows, Cases, Annotations

5%

ArcSight Web