Skip to main Content

VMware Carbon Black Cloud Endpoint Standard

  • Course Code VMCBCES
  • Duration 1 day

Additional Payment Options

  • PSO Please call: 0800-84009 inc. VAT

Public Classroom Price


excl. VAT

Request Group Training Add to Cart

Course Delivery

This course is available in the following formats:

  • Company Event

    Event at company

  • Elearning (Self-paced)

    Self paced electronic learning

  • Public Classroom

    Traditional Classroom Learning

  • Virtual Learning

    Learning that is virtual

Request this course in a different delivery format.

Course Overview


This one-day VMware Carbon Black course teaches you how to use the VMware Carbon Black Cloud Endpoint™ Standard product and leverage the capabilities to configure and maintain the system according to your organization’s security posture and policies. This course provides an in-depth, technical understanding of the product through comprehensive coursework and hands-on scenario-based labs.

Product Alignment:

  • VMware Carbon Black Cloud Endpoint Standard
  • VMware Carbon Black Cloud Endpoint™ Advanced
  • VMware Carbon Black Cloud Endpoint™ Enterprise

Course Schedule

    • Delivery Format: Virtual Learning
    • Date: 13 September, 2021
    • Location: Virtual
    • Delivery Format: Virtual Learning
    • Date: 06 December, 2021
    • Location: Virtual

Target Audience


System administrators and security operations personnel, including analysts and managers

Course Objectives

  • Describe the components and capabilities of VMware Carbon Black Cloud Endpoint Standard
  • Identify the architecture and data flows for Carbon Black Cloud Endpoint Standard communication
  • Perform searches across endpoint data to discover suspicious behavior
  • Manage the Carbon Black Cloud Endpoint Standard rules based on organizational requirements
  • Configure rules to address common threats
  • Evaluate the impact of rules on endpoints
  • Process and respond to alerts
  • Describe the different response capabilities available from VMware Carbon Black Cloud™

Course Content


1  Course Introduction

  • Introductions and course logistics
  • Course objectives

2  Data Flows and Communication

  • Hardware and software requirements
  • Architecture
  • Data flows

3  Searching Data

  • Creating searches
  • Analyzing events
  • Search operators
  • Advanced queries

4  Policy Components

  • Rules
  • Local scanner
  • Sensor capabilities

5  Prevention Capabilities Using Rules

  • Rule types
  • Rule creation
  • Reputation priority
  • Configuring rules
  • Evaluating rule impact

6  Processing Alerts

  • Alert tria
  • ge
  • Alert actions

7  Response Capabilities

  • Using quarantine
  • Using live response
  • Hash banning

Course Prerequisites


This course requires completion of the following course:

- VMware Carbon Black Cloud Fundamentals

Cookie Control toggle icon