See all available courses
Training Courses
Forcepoint
The Forcepoint Data Loss Prevention (DLP) Administrator course instructs you how to test an existing deployment, administer policies, handle incidents and endpoints, and manage the Forcepoint DLP system. You will develop skills in creating data policies, building custom classifiers, and using predefined policies, as well as performing system maintenance.
Format
Virtual Instructor-Led Training
Duration:
16 hours, typically delivered in 4 sessions (4 hours per session), 2 hours outside of class for the exam
Course Price:
£960.00
Exam Price:
One attempt is included
Course Details
Audience
- System administrators, data security administrators, IT staff
- Sales engineers, consultants, implementation specialists
- Forcepoint channel partners and IT staff
- DLP incident and forensic analysts
Course objectives
- Identify and define core DLP terminology, resources, and architecture
- Define and create each type of DLP classifier.
- Define and create each type of DLP resource, including action plans and notifications.
- Define and create each type of DLP policy, rule, and exception.
- Manage policies and rules using bulk updates and policy levels.
- Explain and test the capabilities and modes of OCR.
- Build, deploy, and manage the Forcepoint One Endpoint.
- Define and perform discovery activities.
- Define and perform fingerprinting and machine learning activities.
- Explain the functionality of file tagging and how DLP integrates with it.
- Import and apply file tags, create classifiers, and use them in a policy and rule.
- Review the operational status of DLP components and services.
- Identify and analyze the primary logs used in DLP security manager.
- Identify the elements included in a DLP backup and restore procedure and then perform this procedure.
- Export policies and rules from DLP security manager.
Prerequisites for attendance
- General understanding of system administration and Internet services.
- Basic knowledge of networking and computer security concepts
- A computer that meets the requirements noted at the end of this document.
Certification exams
This course prepares you to take and pass the DLP Administrator certification exam. One exam attempt is included in the price of the course, but the exam is not administered during the course. A minimum score of 80% on the multiple-choice online exam is required to pass.
Course Outline
Module 1: Getting Started with Forcepoint DLP
- Describe Forcepoint DLP and how it works.
- Apply a Forcepoint DLP license.
- Locate DLP system components.
- Find Forcepoint DLP product resources.
Module 2: Configuring Predefined Policies
- Define Forcepoint DLP policies and rules.
- Protect sensitive data using a predefined policy.
- Block transfer of sensitive data.
- Update multiple rules at the same time.
- Configure notifications sent by a predefined policy.
Module 3: Configuring Quick Policies
- Protect sensitive data using quick DLP policies.
- Add user details to Forcepoint DLP.
- Configure notifications with user details.
Module 4: Configuring Custom Policies
- Edit a script classifier to protect data.
- Protect data using a custom policy and a script classifier.
- Decide to which users the policy applies.
- Add users to a policy who are not part of your organization.
- Add cumulative rules to a policy.
Module 5: Adding Custom Classifiers
- Add a keyword classifier to use in a custom policy.
- Add a dictionary classifier to a custom policy.
- Configure different actions for different types of data transfer.
- Decide which types of data transfer the policy monitors.
- Add specific devices that are not monitored by a policy.
Module 6: Adding Further Policy Configuration
- Add a regular expression to a custom policy.
- Configure the order in which policies are applied.
- Remove a group of users from being monitored by a policy.
Module 7: Creating Complex Classifiers
- Create a conditional policy classifier.
Module 8: Configuring Optical Character Recognition (OCR)
- Configure DLP to monitor text in image files.
Module 9: Installing Forcepoint One Endpoint (F1E)
- Install F1E on an endpoint.
- Configure a temporary bypass on an endpoint.
- Give users the opportunity to explain when their actions trigger a policy.
- Configure the operations of an application that Forcepoint DLP monitors.
- Add applications that are not monitored by a policy.
Module 10: Configuring Discovery
- Monitor data that have been saved on the network and endpoints.
Module 11: Configuring Fingerprinting and Machine Learning
- Protect the data in files of a specific type using file fingerprinting.
- Protect data in databases using fingerprinting.
- Protect text documents using machine learning.
Module 12: Configuring File Labeling
- Add file labeling classifiers to use in a policy.
Module 13: Monitoring System Health
- Monitor the components of the DLP system.
- Take a backup of the policies, rules, and configuration of DLP.
- Export DLP policies.
To attend this virtual online course, you must have a computer with:
- A high-speed internet connection (minimum of 1 MB connection required)
- An up-to-date web browser (Google Chrome recommended)
- PDF viewer
- Zoom client
- Speakers and microphone or headset (headset recommended)
A separate monitor, tablet, or ebook reader is also recommended for the course to view the lab guide while conducting the lab scenarios
Training Courses
Forcepoint
Register your interest
Register your interest today to take the Forcepoint Data Loss Prevention (DLP) Administrator training course, and as soon as we confirm the schedule, you'll get an email explaining next steps.
Terms & Conditions
- Virtual Instructor Led Trainings (VILTs) are delivered as live instructor-led training in an online classroom—no on-site delivery element.
- This course is limited to the topics described in this data sheet and may not address all your unique requirements.
- Forcepoint trainings are standard and non-negotiable.
- Forcepoint provides the training “AS IS” and makes no warranties of any kind, express or implied.
- VILT courses must be completed within six months from purchase or the course may be forfeited.
- The training services in this course are provided pursuant to the Subscription Agreement.
- Assent to the Subscription Agreement constitutes acceptance of the above terms and conditions.