Exam ID HP0-M210P
Exam type Performance based exams
Exam duration 23 hours
Exam length 200 questions
Passing score 75%
Delivery languages English
Related Certifications
Supporting courses These recommended courses help you prepare for the exam:
Additional study materials
  • Documentation on Protect724
  • ArcSight ESM Install Guide
  • ArcSight ESM Admin Guide
  • ArcSight ESM 101 Guide
  • ArcSight ESM Upgrade Guide
  • Connector Appliance Admin Guide
  • Logger Admin Guide

Register for this Exam

You will need an HPE Learner ID and a Pearson VUE login and password.

No reference material is allowed at the testing site. This exam may contain beta test items for experimental purposes.
During the exam, you can make comments about the exam items. We welcome these comments as part of our continuous improvement process.

Exam description

This exam tests your ability to plan, install, configure, and implement a complex ArcSight enterprise solution.
This exam iexpects you have on the job experience. The associated training courses, which include hands on activities, provide a foundation. You need real world working experience along with the recommended courses in order to pass the exam.

Ideal candidate for this exam

Typical candidates are experienced IT security experts with multiple product configuration, integration and practical deployment methodologies experience in ArcSight Solutions.

Exam contents

This exam has 200 questions. Here are types of questions to expect:
  • Other
  • Hands on

Advice to help you take this exam

This exam is a proctored, private exam administered over three days.
This exam assesses whether you have the knowledge and skills to design and implement an HPE ArcSight solution.
Therefore, exam activities present a scenario which outlines a particular environment or problem in which specific tasks are to be completed within ESM, Logger and the Connector
Before you ask for your exam to be scored, check and double check your work. Once the proctor begins to score your exam, you are graded on the current state of your configuration, so please do not ask to be graded until you are sure you have tested your setup. Do not proceed to the next step until you are told to do so, as you may undo your prior work before the proctor has a change to grade your work.


This exam validates that you can:

Design of an ArcSight Enterprise solutions based on a given scenario


nstall ArcSight Solutions

  • ESM 6.0c  Install
  • ESM 6.5c  Install
  • Logger Install
  • Connector Appliance Install
  • Connector Installation


Configure ArcSight Solutions

  • SmartConnector SYSLOG multiple destinations configuration (ESM 60 and Logger)
  • Forwarding Connector from ESM 6.0 to Logger
  • Logger Forwarder to ESM


FlexConnector Development

  • FlexConnector  development (categorization and parser)


Describe the Network model

  • Design of Network and Asset models
  • Asset Import Connector


Perform Logger operations

  • Searches
  • Reports


ESM Content Development

  • Active Channels, Filters and Field Sets
  • Variables
  • Data monitors and Dashboards
  • Rules
  • Reports


Upgrade ArcSight

  • ESM 6.0 to 6.5
  • ESM Forwarding Connector
  • SmartConnector AUP


Perform Advanced Configuration

  • Aggregation
  • Overrides



  • Find and correct issues with ArcSight solution

Learning resources that were developed before the Hewlett-Packard Company separation might contain some content and brand elements that have not been updated for Hewlett Packard Enterprise. Learning resources with the highest usage are updated.