HP0-M54 ArcSight ESM Security Analyst

History of ArcSight ESM Security Analyst Certification:

HP0-M54 ArcSight ESM Security Analyst (aka HP Technical Certified II – ArcSight Security Analyst 2012) took the place of ArcSight Certified Security Analyst (ACSA) aka ArcSight ESM Security Analyst (AESA).  The confusion on certification names comes from the acquisition of ArcSight by HP in 2010.  ArcSight had already created a certification for the ESM (admin and analyst), but once HP took it, they started to integrate it into their ExpertOne certifications.

I have noticed that companies look for the old ACIA/ACSA when they want an ArcSight certified professional not knowing that that cert no longer exists.

reference:  http://h10120.www1.hp.com/expertone/view_certifications.html

HP ArcSight ESM ArcSight Prerequisites:

To pass this exam, you should have at least 6 months experience using ArcSight ESM or successfully completed ArcSight ESM Security Analyst training. Exams are based on an assumed level of industry-standard knowledge that may be gained from the training, hands- on experience, or other pre-requisite events. You should also be knowledgeable about Common security devices and their functions, such as IDS & firewalls; network device functions, such as routers, switches, hubs, etc.; TCP/IP functions, such as CIDR blocks, subnets, addressing, communications, etc.; Basic Windows operating system tasks & functions; Possible attack activities, such as scans, man in the middle, sniffing, DoS, etc and possible abnormal activities, such as worms, Trojans, viruses, etc.; SIEM terminology, such as threat, vulnerability, risk, asset, exposure, safeguards, etc.; Security directives, such as Confidentiality, Integrity, Availability.

HP ExperOne does not list the Objectives for this cert for some reason (standard LACK of HP taking on too much business with too little staff IMHO).  Anyway, after taking this certification just make sure you have experience with each of the ArcSight Console Resources.  You should use each until you understand them because questions are about the resources.

How to take the HP0-M54 ArcSight Admin Cert

That certification can be taken through Pearson VUE.  You have to get an account with HP ExpertOne first.  HP issues an “HP Learner ID”

The test cost about 250USD and has about 75+ questions.

There are so many braindumps articles and “products” for this certification.  Its really unfortunate that HP has not done more to make this certification more relevant since ArcSight is the top SIEM in the world (circa 2014).  HP is trying but sometimes it seems they have more products and services than they can handle.  They did recently update HP0-M54 so thats positive.

If you are planning on taking this certification, you should think about NOT doing braindumps.  Get some actual experience with the product.  You can downloaded it for a free trial and play with it.  If you want to make money in as an ArcSight subject matter expert you will have to put in some real time and effort.  The test will not do anything for you without experience.