VMware vRealize Automation SaltStack SecOps: Deploy and Manage [V8.6]

COURSE OUTLINE

Course module

1. Course Introduction

• Introductions and course logistics
• Course objectives

2. SaltStack Config Architecture

• Identify the SaltStack Config deployment types
• Identify the components of SaltStack Config
• Describe the role of each SaltStack Config component

3. SaltStack Config Security

• Describe local user authentication
• Describe LDAP and Active Directory authentication
• Describe the roles and permissions in vRealize Automation for SaltStack Config
• Describe the roles and permissions in SaltStack Config
• Describe the SecOps permissions in SaltStack Config
• Describe the advanced permissions available in SaltStack Config

4. Targeting Minions

• Describe targeting and its importance
• Target minions by minion ID
• Target minions by glob
• Target minions by regular expressions
• Target minions by lists
• Target minions by compound matching
• Target minions by complex logical matching

5. Remote Execution and Job Management

• Describe remote execution and its importance
• Describe functions and arguments
• Create and manage jobs
• Use the Activities dashboard

6. Configuration Control Through States, Pillars, Requisites, and Declarations

• Define the SaltStack states
• Describe file management in SaltStack Config
• Create the SaltStack state files
• Identify the components of a SaltStack state
• Describe pillar data and the uses of pillar data
• Configure pillar data on the SaltStack Config master server
• Use pillar data in variables in the state files
• Describe the difference between IDs and names in the state files
• Use the correct execution order
• Use requisites in the state files

7. Using Jinja and YAML

• Describe the SaltStack Config renderer system
• Use YAML in the state files
• Use Jinja in the state files
• Use Jinja conditionals, lists, and loops

8. Using SaltStack SecOps Comply

• Describe the SaltStack SecOps Comply architecture
• Describe CIS and DISA STIG benchmarks
• Describe the SaltStack SecOps Comply security library
• Describe the remediation differences between SaltStack SecOps and VMware Carbon Black
• Create and manage the policies
• Create and manage the custom checks
• Run assessments on the minion systems
• Use SaltStack SecOps to remediate the noncompliant systems
• Manage the SaltStack SecOps Comply configuration options
• Manage the benchmark content ingestion

9. Using SaltStack SecOps Protect

• Describe Common Vulnerabilities and Exposures (CVEs)
• Use the Protect dashboard
• Create and manage the policies
• Update the vulnerability library
• Run the vulnerability scans
• Remediate the vulnerabilities
• Manage the vulnerability exemptions