Exam ID HP0-A100
Exam type Proctored exam taken at dedicated testing center
Exam duration 1 hour 30 minutes
Exam length 60 questions
Passing score 65%
Delivery languages English
Related Certifications
Supporting courses These recommended courses help you prepare for the exam:
Option 1
Option 2

Register for this Exam

You will need an HPE Learner ID and a Pearson VUE login and password.

No reference material is allowed at the testing site. This exam may contain beta test items for experimental purposes.
During the exam, you can make comments about the exam items. We welcome these comments as part of our continuous improvement process.

Exam description

This exam tests your skills on the ArcSight security solution. The exam addresses major security risks associated with a digital environment and design of a security solution. The exam tests your knowledge of the use of ArcSight products to combat those risks. The exam tests your ability to gather business requirements for the ArcSight solution.

Ideal candidate for this exam

New candidates who want to acquire the HP ATP - ArcSight Security V1 certification.

Exam contents

This exam has 60 questions. Here are types of questions to expect:
  • Multiple choice (multiple responses)
  • Multiple choice (single response)

Advice to help you take this exam

This exam assesses whether you have the knowledge and skills to navigate and utilize ArcSight Security products as a security solution in a business development and production environment. HPE highly recommends the associated training.

Many exam questions present a scenario that outlines a particular environment or problem. Some questions include exhibits.

If a question asks for more than one answer, select all correct options. There is no partial credit.

If a question takes too much time, mark the item for review and return to it at the end of the exam.
Read the entire question and consider all options before you answer. If the question includes an exhibit, study the exhibit and read the question again. Select the answer that fully responds to the question. If the question asks for more than one answer, select all correct answers. There is no partial credit.

Objectives

This exam validates that you can:
7%

ArcSight Technology Overview

  • List common Business risks faced by organizations
  • Describe How ArcSight Technologies address these risks
  • List ESM Resources

10%

ArcSight Event Schema

  • List ArcSight Event Schema Group
  • Describe ArcSight Event Schema Definitions

20%

ArcSight Event Lifecycle

  • Lifecycle Overview
  • Describe Data Collection and Event Processing
  • Describe Priority Evaluation and Network Model Lookup
  • Describe Correlation of the Event Stream
  • Describe Monitoring and Investigation process
  • Describe Workflow
  • Describe Reporting and Incident Analysis

15%

What is Enterprise Security Manager (ESM)?

  • List problems solved by ESM
  • List the benefits of using ESM

8%

What is ArcSight Express?

  • List problems solved by ArcSight Express
  • List The benefits of using ArcSight Express

13%

What are SmartConnectors and the Connector Appliance?

  • List problems solved by SmartConnectors
  • List the benefits of using SmartConnectors
  • List the benefits of using a Connector Appliance

5%

What is Logger?

  • List problems solved by Logger
  • List the benefits of using Logger

12%

What are Compliance Insight Packages (CIPs)?

  • Describe CIPs
  • List the benefits of using CIPs

10%

What is IdentityView?

  • Describe IdentityView
  • Describe the benefits of using IdentityView

Sample questions

Sample questions are a preview of what you can expect on the actual exam. They help you become familiar with the exam format and complexity. These sample questions are similar to actual exam questions, but do not actually appear on the exam.

To view sample questions, print or download this page.

Learning resources that were developed before the Hewlett-Packard Company separation might contain some content and brand elements that have not been updated for Hewlett Packard Enterprise. Learning resources with the highest usage are updated.