The administration exams ask how you run the console. Exam 250-586 asks how you assess a customer, write the designs, run a pilot and keep an SES Complete deployment healthy after go-live.
The administration exams ask how you run the console. Exam 250-586 asks how you assess a customer, write the designs, run a pilot and keep an SES Complete deployment healthy after go-live.
Responder asks what you would do about the alert. Administrator asks how the platform that raised it was configured. CCFA-200b covers roles, sensors, host groups, prevention and containment policy, custom rules and workflows, and it wants 48 of 60 right.