VMware vRealize Automation SaltStack SecOps: Deploy and Manage [V8.6] Training

Curriculum

Module 1: Course Introduction

Introductions and course logistics

Course objectives

Module 2: SaltStack Config Architecture

Identify the SaltStack Config deployment types

Identify the components of SaltStack Config

Describe the role of each SaltStack Config component

Module 3: SaltStack Config Security

Describe local user authentication

Describe LDAP and Active Directory authentication

Describe the roles and permissions in vRealize Automation for SaltStack Config

Describe the roles and permissions in SaltStack Config

Describe the SecOps permissions in SaltStack Config

Describe the advanced permissions available in SaltStack Config

Module 4: Targeting Minions

Describe targeting and its importance

Target minions by minion ID

Target minions by glob

Target minions by regular expressions

Target minions by lists

Target minions by compound matching

Target minions by complex logical matching

Module 5: Remote Execution and Job Management

Describe remote execution and its importance

Describe functions and arguments

Create and manage jobs

Use the Activities dashboard

Module 6: Configuration Control Through States, Pillars, Requisites, and Declarations

Define the SaltStack states

Describe file management in SaltStack Config

Create the SaltStack state files

Identify the components of a SaltStack state

Describe pillar data and the uses of pillar data

Configure pillar data on the SaltStack Config master server

Use pillar data in variables in the state files

Describe the difference between IDs and names in the state files

Use the correct execution order

Use requisites in the state files

Module 7: Using Jinja and YAML

Describe the SaltStack Config renderer system

Use YAML in the state files

Use Jinja in the state files

Use Jinja conditionals, lists, and loops

Module 8: Using SaltStack SecOps Comply

Describe the SaltStack SecOps Comply architecture

Describe CIS and DISA STIG benchmarks

Describe the SaltStack SecOps Comply security library

Describe the remediation differences between SaltStack SecOps and VMware Carbon Black®

Create and manage the policies

Create and manage the custom checks

Run assessments on the minion systems

Use SaltStack SecOps to remediate the noncompliant systems

Manage the SaltStack SecOps Comply configuration options

Manage the benchmark content ingestion

Module 9: Using SaltStack SecOps Protect

Describe Common Vulnerabilities and Exposures (CVEs)

Use the Protect dashboard

Create and manage the policies

Update the vulnerability library

Run the vulnerability scans

Remediate the vulnerabilities

Manage the vulnerability exemptions