Fortinet - Certified Solution Specialist Security Operations

Varighet

Varighet:

Bare 2 dager

Metode

Metode:

klasserommet / på nett / Hybrid

Neste dato

Neste dato:

24/6/2024 (Mandag)

Overview

On this accelerated Fortinet Certified Solution Specialist Security Operations certification validates your ability to design, administer, monitor, and troubleshoot Fortinet security operations solutions. This curriculum covers security operations infrastructures using advanced Fortinet solutions.

In this course, you will learn how to use FortiSIEM in a multi-tenant environment. You will learn about rules and their architecture, how incidents are generated, how baseline calculations are performed, the different methods of remediation available, and how the nested queries and lookup tables work for advanced analytics using FortiSIEM. You will also learn how to integrate FortiSOAR with FortiSIEM.

In just 2 days, you’ll learn to identify various implementation requirements for a multi-tenant FortiSIEM deployment . You’ll also learn how to:

  • Deploy FortiSIEM in a hybrid environment with and without collectors
  • Design multi-tenant solutions with FortiSIEM
  • Deploy collectors in a multi-tenant environment
  • Manage EPS assignment and restrictions on FortiSIEM
  • Manage resource utilization of a multi-tenant FortiSIEM cluster
  • Maintain and troubleshoot a collector installation
  • Deploy and manage Windows and Linux agents
  • Create rules by evaluating security events
  • Define actions for a single pattern security rule
  • Identify multiple pattern security rules and define conditions and actions for them
  • Differentiate between a standard and baseline report
  • Create your own baseline profiles Deploy FortiSIEM UEBA agents
  • Examine log-based UEBA rules
  • Examine nested queries for advanced analytics
  • Configure lookup tables for advanced analytics
  • Configure clear conditions on FortiSIEM
  • Analyze some out-of-the-box remediation scripts
  • Configure various remediation methods on FortiSIEM
  • Integrate FortiSOAR with FortiSIEM
  • Remediate incidents from FortiSOAR

At the end of this course, you’ll sit the Fortinet exam, and achieve your Fortinet Certified Solution Specialist Security Operations certification. Through Firebrand’s Lecture | Lab | Review methodology, you’ll get certified at twice the speed of the traditional training and get access to courseware, learn from certified instructors, and train in a distraction-free environment.

 

Audience

This course is ideal for:

  • Cybersecurity professionals who require the expertise needed to design, manage, support, and analyse advanced Fortinet security operations solutions.
  • Security professionals involved in the management, configuration, administration, and monitoring of FortiSIEM and FortiSOAR devices—in an enterprise or service provider deployment—that are used to monitor and secure the networks of customer organizations.

Her er 8 grunner til hvorfor du skal gjennomføre ditt hos Firebrand Training:

  1. Du blir utdannet og sertifisert på bare 2 dager. Hos oss får du din utdanning og sertifisering på rekordtid, en sertifisering du også gjennomfører der og da som en integrert del av den intensive, akselererte utdanningen.
  2. Alt er inkludert. Et engangsbeløp dekker alt kursmaterial, eksamen, kost og losji og tilbyr den mest kostnadseffektive måten å gjennomføre ditt kurs og sertifisering på. Og dette uten noen uannonserte ytterligere kostnader.
  3. Du klarer sertifiseringen første gangen eller kan gå kurset om igjen kostnadsfritt. Det er vår garanti. Vi er sikre på at du vil klare din sertifisering første gangen. Men skulle du mot formodning ikke gjøre det kan du innen et år komme tilbake og kun betale for eventuelle overnattinger og din eksamen. Alt annet er gratis.
  4. Du lærer deg mer.Tradisjonelle utdanningsdager varer fra kl. 09.00 til 16.00 med lange lunsj- og kaffepauser. Hos Firebrand Training får du minst 12 timers effektiv og fokusert kvalitetsutdanning hver dag sammen med din instruktør, uten private eller arbeidsrelaterte, forstyrrende momenter.
  5. Du lærer deg raskere. Vi kombinerer de tre innlæringsmetodene (Presentasjon |Øving| Diskusjon) slik at vi gjennomfører kurset på en måte som sikrer at du lærer deg raskere og lettere.
  6. Du er i sikre hender.Vi har utdannet og sertifisert 134.561 personer, vi er partner med alle de store navn i bransjen og vi har vunnet atskillige utmerkelser, bla. a. "Årets Learning Partner 2010, 2011, 2012, 2013 og 2015” fra Microsoft Danmark og med en vekst på 1430 % siden 2009 er vi årets Gazelle prisvinner på Sjælland, Danmark.
  7. Du lærer deg ikke bare teorien. Vi har videreutviklet kursen og tilbyr flere praktiske øvelser og sikrer på den måten, at du kan bruke dine ferdigheter for å løse daglige praktiske problemstillinger.
  8. Du lærer av de beste. Våre instruktører på er de beste i bransjen og tilbyr en helt unik blanding av kunnskap, praktisk erfaring og pasjon for å lære bort.

Curriculum

 

Module 1: Multi-Tenancy SOC Solution for MSSP

  • Describe multi-tenancy solutions for SOC environment
  • Define and deploy collectors and agents
  • Install and manage FortiSIEM Windows and Linux agents

 

Module 2: FortiSIEM Rules

  • Explain FortiSIEM rule processing
  • Construct FortiSIEM rules
  • Explain the MITRE ATT&CK® framework

 

Module 3: FortiSIEM Baseline and UEBA

  • Explain FortiSIEM baseline and profile reports
  • Construct FortiSIEM baseline rules
  • Configure UEBA on FortiSIEM

 

Module 4: Clear Conditions and Remediation

  • Remediate incidents on FortiSIEM manually and automatically
  • Remediate incidents using FortiSOAR

 

Module 5: Multi-Tenancy SOC Solution for MSSP

  • Describe multi-tenancy solutions for SOC environments
  • Define and deploy collectors and agents
  • Install and manage FortiSIEM Windows and Linux agents

Module 6: FortiSIEM Rules and Analytics

  • Explain FortiSIEM rule processing
  • Construct FortiSIEM rules
  • Configure advanced nested queries and lookup tables

 

Module 7: FortiSIEM Baseline and UEBA

  • Explain FortiSIEM baseline and profile reports
  • Construct FortiSIEM baseline rules
  • Explain UEBA on FortiSIEM

 

Module 8: Conditions and Remediation

  • Remediate incidents on FortiSIEM both manually and automatically
  • Remediate incidents through FortiSOAR

Exam Track

At the end of this accelerated course, you’ll sit the following exam at the Firebrand Training centre, covered Certification Guarantee:

Fortinet Certified Solution Specialist Security Operations exam NSE 7 - Advanced Analytics 6.3

To obtain the FCSS in Security Operations certification, you must pass the Fortinet NSE 7–Advanced Analytics exam.

  • Duration: 60 minutes
  • Format: Multiple choice and multiple select
  • Number of questions: 35
  • Passing score: Answers must be 100% correct for credit. No partial credit is given. There are no deductions for incorrect answers.

What's Included

Prerequisites

Before attending this accelerated course, you should have:

  • An understanding of the topics covered in the following courses, or equivalent experience:
  • FCP - FortiGate Security
  • FCP - FortiGate Infrastructure
  • FCP - FortiSIEM

 

  • It is also recommended that you have an understanding of the following topics, or have equivalent experience:
  • Python programming
  • Jinja2 templating language for Python
  • Linux systems
  • SOAR technologies

Anmeldelser

Vi har lært opp 134.561 personer på 12 år. Vi ba dem om å anmelde vår akselererte opplæring. Akkurat nå har 96,41% angitt at Firebrand overgikk forventningene:

"Very good Resources within the E-Book, Mixed with the Lessons, it is also has good Labs to get hands on Practice and put the theory somewhere practical to get full learning experience, with very high standard explanation throughout the lectures. 10/10!"
Rhys Thomas, Nokia. (7/5/2024 (Tirsdag) til 10/5/2024 (Fredag))

"All the staff are very attentive. A fantastic instructor that was able to answer all questions whilst keeping the sessions informative."
Ash Petch, Cepac. (7/5/2024 (Tirsdag) til 10/5/2024 (Fredag))

"My experience at Firebrand was brilliant. The people here are nice and approachable among the other apprentices of whom also are very nice and made great friends here too! I am looking forward to my next 2 trips here!"
Lewis Vick, Computacenter. (7/5/2024 (Tirsdag) til 10/5/2024 (Fredag))

"Good course lecturer. It was good to go over the whole content of Server+ and hear relevant examples."
Anonymous. (7/5/2024 (Tirsdag) til 10/5/2024 (Fredag))

"It was lovely being here as there was lots of new learning"
Imran Riaz, Watford Boys Grammar School. (7/5/2024 (Tirsdag) til 10/5/2024 (Fredag))

Kursdatoer

Start

Slutt

Kapasitet

Plass

Registrer deg

19/2/2024 (Mandag)

20/2/2024 (Tirsdag)

Ferdig - Gi tilbakemelding

-

 

24/6/2024 (Mandag)

25/6/2024 (Tirsdag)

Venteliste

Landsdekkende

 

5/8/2024 (Mandag)

6/8/2024 (Tirsdag)

Begrenset kapasitet

Landsdekkende

 

16/9/2024 (Mandag)

17/9/2024 (Tirsdag)

Ledige plasser

Landsdekkende

 

28/10/2024 (Mandag)

29/10/2024 (Tirsdag)

Ledige plasser

Landsdekkende

 

9/12/2024 (Mandag)

10/12/2024 (Tirsdag)

Ledige plasser

Landsdekkende

 

Siste anmeldelser fra studenten vår