|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/fcssadvanced-analytics-67-architect/
课程评论：没有评论
**课程名称**: FCSS-Advanced Analytics 6.7 Architect - **FortiSIEM与FortiSOAR高级分析与架构** **课程概述**: 本课程旨在帮助您掌握Fortinet安全运维解决方案的核心能力，并为获得Fortinet Certified Solution Specialist - Security Operations (FCSS-SO) 认证奠定基础。课程将深入探讨FortiSIEM和FortiSOAR在SOC（安全运营中心）或MSSP（托管安全服务提供商）环境中的应用。 **学习重点**: * **多租户SOC解决方案**: 了解如何构建和管理适用于MSSP环境的多租户SOC架构，包括收集器和代理的部署与管理。 * **FortiSIEM规则与分析**: 学习FortiSIEM的规则处理机制，掌握如何构建复杂的查询、使用查找表，以及创建自定义规则以实现高级威胁检测。 * **FortiSIEM基线与UEBA**: 理解FortiSIEM的基线和用户与实体行为分析（UEBA）功能，学习如何构建基线规则并利用UEBA识别异常行为。 * **事件处理与自动化**: 掌握在FortiSIEM中手动和自动化的事件响应与修复方法，以及如何通过FortiSOAR实现更强大的事件联动和自动化处置。 **面向人群**: 本课程适合负责FortiSIEM设备管理、配置、运维以及FortiSOAR与FortiSIEM集成以监控和保护客户网络信息安全相关的网络安全专业人士。 **考试信息**: * **考试名称**: FCSS-Advanced Analytics 6.7 Architect * **考试系列**: FCSS_ADA_AR-6.7 * **题目数量**: 35道选择题 * **考试时长**: 70分钟 * **语言**: 英语 * **产品版本**: FortiSIEM 6.3, FortiSOAR 7.3 **通过本课程的学习，您将能够**: * 能够设计、管理、监控和排查Fortinet安全运维解决方案。 * 熟练运用FortiSIEM的各种分析和规则引擎。 * 掌握FortiSIEM与FortiSOAR的协同工作，实现高效的事件响应和自动化。 * 为通过FCSS-SO认证考试做好充分准备。
Certification:This exam is in the Fortinet Certified Solution Specialist - Security Operations certification track. This certification validates your ability to design, administer, monitor, and troubleshoot Fortinet security operations solutions.Exam:The FCSS-Advanced Analytics 6.7 Architect exam evaluates your knowledge of, and expertise with, FortiSIEM and FortiSOARdevices in SOC or MSSP environments.The exam tests applied knowledge of FortiSIEM configuration, and operation, and includes operational scenarios, incidentanalysis, integration with FortiSOAR, and troubleshooting scenarios.Audience:The FCSS-Advanced Analytics 6.7 Architect exam is intended for network and security professionals responsible for themanagement, configuration, administration, and monitoring of FortiSIEM devices, and integration of FortiSOAR and FortiSIEM in an enterprise or service provider deployment used to monitor and secure the networks of a customer's organization.Exam Details:Exam name: FCSS-Advanced Analytics 6.7 ArchitectExam series: FCSS_ADA_AR-6.7Time allowed: 70 minutesExam questions: 35 multiple-choice questionsScoring: Pass or fail. A score report is available from your Pearson VUE accountLanguage: EnglishProduct version: FortiSIEM 6.3, FortiSOAR 7.3 FCSS-Advanced Analytics 6.7 ArchitectExam series: FCSS_ADA_AR-6.7Number of questions: 35Exam time: 70 minutesLanguage: EnglishProduct version: FortiSIEM 6.3, FortiSOAR 7.3Exam Topics:Successful candidates have applied knowledge and skills in the following areas and tasks:l Multi-Tenancy SOC Solution for MSSPl Describe multi-tenancy solutions for SOC environmentsl Define and deploy collectors and agentsl Install and manage FortiSIEM Windows and Linux agentsl FortiSIEM Rules and Analyticsl Explain FortiSIEM rule processingl Construct FortiSIEM rulesl Configure advanced nested queries and lookup tablesl FortiSIEM Baseline and UEBAl Explain FortiSIEM baseline and profile reportsl Construct FortiSIEM baseline rulesl Explain UEBA on FortiSIEMl Conditions and Remediationl Remediate incidents on FortiSIEM both manually and automaticallyl Remediate incidents through FortiSOAR
