|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/splk-3001-splunk-enterprise-security-admin/
课程评论：没有评论
## Splunk Enterprise Security 管理员认证考试 (SPLK-3001) 课程总结 本课程专为准备参加 Splunk Enterprise Security (ES) 认证管理员考试的学生设计。该考试是获得 Splunk ES 认证管理员资格的最后一步。 **考试详情：** * **时长：** 57分钟 * **题目数量：** 66道 * **总座位时间：** 60分钟（包含3分钟的协议审查时间） * **评估内容：** 评估考生在 Splunk Enterprise Security 的安装、配置和管理方面的知识和技能。 **课程涵盖的主要主题：** 1. **ES 简介 (5%)** 2. **监控与调查 (10%)** 3. **安全情报 (5%)** 4. **取证、玻璃报表和导航控制 (10%)** 5. **ES 部署 (10%)** 6. **安装与配置 (15%)** 7. **验证 ES 数据 (10%)** 8. **自定义加载项 (5%)** 9. **调优相关性搜索 (10%)** 10. **创建相关性搜索 (10%)** 11. **查找表和身份管理 (5%)** 12. **威胁情报框架 (5%)** 本课程将帮助您全面掌握 Splunk Enterprise Security 的各项功能，为通过官方认证考试打下坚实基础。
This course is built for students who are ready to take the Splunk Enterprise Security Certified Admin certification. Splunk Enterprise Security Certified Admin Exam Description: The Splunk Enterprise Security (ES) Certified Admin exam is the final step towards the completion of the Splunk ES Certified Admin certification. This app-specific certification exam is a 57-minute, 66-question assessment that evaluates a candidate's knowledge and skills in the installation, configuration, and management of Splunk Enterprise Security. Candidates can expect an additional 3 minutes to review the exam agreement, for a total seat time of 60 minutes. Topics Include:1.0 ES Introduction 5%2.0 Monitoring and Investigation 10%3.0 Security Intelligence 5%4.0 Forensics, Glass Tables, and Navigation Control 10%5.0 ES Deployment 10%6.0 Installation and Configuration 15%7.0 Validating ES Data 10%8.0 Custom Add-ons 5%9.0 Tuning Correlation Searches 10%10.0 Creating Correlation Searches 10%11.0 Lookups and Identity Management 5%12.0 Threat Intelligence Framework 5%
