Exam ID HP0-M210P
Exam type Performance based exams
Exam duration 23 hours
Exam length 200 questions
Passing score 75%
Delivery languages English
Related Certifications
Supporting courses These recommended courses help you prepare for the exam:
Additional study materials
  • Documentation on Protect724
  • ArcSight ESM Install Guide
  • ArcSight ESM Admin Guide
  • ArcSight ESM 101 Guide
  • ArcSight ESM Upgrade Guide
  • Connector Appliance Admin Guide
  • Logger Admin Guide

Register for this Exam

This exam is a proctored, private exam administered over three days. Click on the link above for additional information and registration

During the exam, you can make specific comments about the exam and items. HPE welcomes these comments as part of our continuous improvement process. No online or hard copy reference material will be allowed at the testing site. This exam may contain beta test items for experimental purposes.

Exam description

Designing and Implementing HP ArcSight Solution Practical exam tests the ability to plan, install, configure and implement a complex ArcSight enterprise solution.
This certification exam is designed for candidates with “on the job” experience. The associated training courses, which include hands-on activities, provide a foundation. However, real world working experience along with the recommended courses is needed in order to pass the exam.

Who should take this exam?

This Master ASE level exam is intended for experienced IT security experts with multi-product configuration, integration and practical deployment methodologies for ArcSight Solutions.

Exam contents

This exam has 200 questions. Here are types of questions to expect:
  • Other
  • Hands on

Tips for taking this exam

This exam is a proctored, private exam administered over three days. 
This exam assess whether you have the knowledge and skills to design and implement an HPE ArcSight solution. Therefore, exam activities present a scenario which outlines a particular environment or problem in which specific tasks are to be completed within ESM, Logger and the Connector Applianc.
Before asking for your exam to be scored, check and double check your work.  Once the proctor begins scoring, you will be graded on the current state of your configuration so please do not ask to be graded until you are sure you have tested your setup.  Do not proceed to the next step until you are told to do so, as you may undo your prior work before the proctor has a change to grade your work.


This exam is a hands-on, task-driven, multi-step exam. Here are the types of tasks to expect:

Design of an ArcSight Enterprise solutions based on a given scenario


nstall ArcSight Solutions

  • ESM 6.0c  Install
  • ESM 6.5c  Install
  • Logger Install
  • Connector Appliance Install
  • Connector Installation


Configure ArcSight Solutions

  • SmartConnector SYSLOG multiple destinations configuration (ESM 60 and Logger)
  • Forwarding Connector from ESM 6.0 to Logger
  • Logger Forwarder to ESM


FlexConnector Development

  • FlexConnector  development (categorization and parser)


Describe the Network model

  • Design of Network and Asset models
  • Asset Import Connector


Perform Logger operations

  • Searches
  • Reports


ESM Content Development

  • Active Channels, Filters and Field Sets
  • Variables
  • Data monitors and Dashboards
  • Rules
  • Reports


Upgrade ArcSight

  • ESM 6.0 to 6.5
  • ESM Forwarding Connector
  • SmartConnector AUP


Perform Advanced Configuration

  • Aggregation
  • Overrides



  • Find and correct issues with ArcSight solution

Valuable and relevant learning resources developed before the Hewlett-Packard Company separation might contain some content and brand elements that have not been updated for Hewlett Packard Enterprise. Learning resources with the highest usage will be updated.