When does class start/end?
Classes begin promptly at 9:00 am, and typically end at 5:00 pm.
IBM Security QRadar v7.4.3 Deployment Professional
This IBM Web-Based Training (WBT) is Self-Paced and includes: - Instructional content available online for duration of course - Visuals without hands-on lab exercises A QRadar Deployment specialist...
Read More
This IBM Web-Based Training (WBT) is Self-Paced and includes:
- Instructional content available online for duration of course
- Visuals without hands-on lab exercises
A QRadar Deployment specialist plans and installs QRadar SIEM and performs the initial configuration that allows an organization to begin using it. In this course, students will learn the various activities and responsibilities of a QRadar Deployment Professional. The course outline follows the same structure as the IBM Certified Deployment Professional - Security QRadar SIEM V7.4.3 (C1000-140) exam and helps the student prepare for the exam.
Skills Gained
- Review the business needs of your organization and determine the QRadar apps and content value for your organization.
- Report the value of your QRadar deployment and what it provides to your organization.
- Describe the functional context and network flow analytics, extensible architecture, deployment models, components, resilience, licensing, and the flow of an event through the QRadar data pipeline.
- Explain installing QRadar, adding a license, adding certificates, configuring backup and restore, configuring the network hierarchy, and configuring user settings.
- Define and configure events and flows, log and flow sources, custom properties, and the flow data pipeline.
- Use and configure the QRadar Assistant app, configure and troubleshoot X-Force feeds, filter QRadar rules in the Use Case Manager app, view and expand your rules coverage with the MITRE ATT&CK interface, and import new assets.
- Update the QRadar network hierarchy, find Remote to Remote events, monitor the QRadar system health, understand QRadar system notifications, monitor system load and storage, Investigate QRadar logs, troubleshoot apps, and identify unknown events.
- Describe QRadar rules and offenses, offense indexing, use the rule response limiter when creating rules, perform server discovery, explain the role that building blocks play in searches, and use QRadar reference data in rules.
- Explain how to migrate data between consoles, prepare QRadar for upgrades, manage and migrate apps, back up data from one QRadar Console and restore it on another.
- Explain how multi-tenancy works in QRadar, explain overlapping IP addresses in multitenant environments, segment data between QRadar tenants, manage apps in multi-tenant environments, configure network hierarchy in multitenant environments, and configure Security Profiles in multitenant environments.
Who Can Benefit
null
Prerequisites
null
Course Details
Course Outline
null