Lesson 1: Administration, Roles, Clients, and Threat Response

Review a realistic scenario involving administrator accounts, domains, roles, and delegated access.
Create or validate a configuration plan covering client inventory, health, commands, and operational status and threat events, risk details, remediation, and response actions.
Use logs, reports, or test results to confirm incident documentation and escalation workflow.

Explain the purpose and operational impact of administrator accounts, domains, roles, and delegated access.
Apply practical controls for client inventory, health, commands, and operational status and threat events, risk details, remediation, and response actions.
Validate and troubleshoot incident documentation and escalation workflow using an evidence-based workflow.

Lesson Overview