29
Cloud & Smarter Infrastructure Professional Certification Program Study Guide Series Exam C2010-508 - IBM Endpoint Manager V9.0 Fundamentals

Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

  • Upload
    ngodieu

  • View
    241

  • Download
    0

Embed Size (px)

Citation preview

Page 1: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

Cloud & Smarter Infrastructure Professional Certification Program

Study Guide Series

Exam C2010-508 - IBM Endpoint Manager V9.0 Fundamentals

Page 2: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

Purpose of Exam Objectives ............................................................................. 3

High-level Exam Objectives ............................................................................... 4

Detailed Exam Objectives ................................................................................... 6

Section 1 - IBM Endpoint Manager Architecture ........................................................ 6

Section 2 - IBM Endpoint Manager Console ................................................................ 9

Section 3 - Properties and Analyses ............................................................................ 14

Section 4 - Fixlets, Tasks and Baselines .................................................................... 19

Section 5 - Actions ............................................................................................................ 25

Next Steps .............................................................................................................30

Page 3: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

Purpose of Exam Objectives

When an exam is being developed, the Subject Matter Experts work together to define the role the certified individual will fill. They define all of the tasks and knowledge that an individual would need to have in order to successfully implement the product. This creates the foundation for the objectives and measurement criteria, which are the basis for the certification exam. The Tivoli Certification item writers use these objectives to develop the questions that they write and which will appear on the exam. It is recommended that you review these objectives. Do you know how to complete the task in the objective? Do you know why that task needs to be done? Do you know what will happen if you do it incorrectly? If you are not familiar with a task, then go through the objective and perform that task in your own environment. Read more information on the task. If there is an objective on a task there is about a 95% chance that you WILL see a question about it on the actual exam. After you have reviewed the objectives and completed your own research, then take the assessment exam. While the assessment exam will not tell you which question you answered incorrectly, it will tell you how you did by section. This will give you a good indication as to whether you are ready to take the actual exam or if you need to further review the materials. Note: This is the high-level list of objectives. As you review these objectives, click for a more detailed level of how to perform the task.

Page 4: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

High-level Exam Objectives

Section 1 - IBM Endpoint Manager Architecture

1.1 Given the need to understand IEM architecture and component configuration, describe the IEM architechure and component configuratuion so that it can be accurately explained to a client.

1.2 Given a need to perform patch management on endpoints, define the supported patching platforms, so that systems can be effectively patched.

1.3 Given a need to perform supported 3rd party applications on endpoints, define the supported 3rd party applications, so that applications can be effectively patched.

1.4 Given a need to troubleshoot agents on endpoints, define the content and default location of agent logs, so that agent log review is possible.

1.5 Given a need to troubleshoot agents on endpoints, define the name of the Endpoint Manager Service, so that troubleshooting is possible.

1.6 Given the need to ensure certain endpoints cannot be targeted by an action, define how to lock and unlock an endpoint, so there is an existing mechanism to stop actions from being taken on an endpoint.

Section 2 - IBM Endpoint Manager Console

2.1 Given the need to troubleshoot missing content in the IEM Console, perform the steps necessary to clear the cache and refresh the IEM Console, so that the console forces an update to the console data.

2.2 Given the need to search for content in the List Panel of IEM Console, login to the IEM Console and navigate to the List Panel, so that you can search for the appropriate information.

2.3 Given the need to update the content of the IEM Console, select the “Refresh Console” button so that you can refresh the content of the IEM Console.

2.4 Given a need to force a client to check in to IEM server and update properties in the IEM console, execute a “Send Refresh” option against a client, so that the client will report to the IEM server.

2.5

Given the need to show hidden content and show non-relevant content within the IEM console, select the box “Show Hidden Content” and “Show Non-Relevant Content” in the IEM console, so that you can view all content for the appropriate information.

2.6 Given the need to navigate in the Endpoint Manager console, list the Endpoint manager domains and their purpose, so the user can efficiently find the items they need in the console.

2.7 Given the need to create a grouping of endpoints, explain the difference between an automatic and manual group, so that the most effective group is used at the appropriate time.

2.8 Given an environment that has enough endpoints to require the grouping of computers, explain the process for creating, modifying, and deleting computer groups, so that an operator can successfully manage their environment.

Page 5: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

2.9 Given the need to identify the patches to which an endpoint is vulnerable, define ways to see the status, so an operator can determine which patches are needed to resolve any vulnerability issues.

Section 3 - Properties and Analyses

3.1

Given the need to perform IBM Endpoint Manager (IEM) Console operations in a customer’s network and console access as a non master operator in the customer’s environment, define managed properties and explain how they can be utilized in the context of action targeting and reporting so that fixlets and tasks can be accurately actioned and reported upon after completion.

3.2

Given the need to perform IEM Console operations in a customer’s network, and given console access as a non master operator in the customer’s environment so that fixlets and tasks can be accurately actioned and reported upon after completion.

3.3

Given the need to perform IEM console operations in a customer’s network, and given console access as a non master operator in the customer’s environment, define managed properties and explain how they can be utilized in the context of action targeting and reporting so that fixlets and tasks can be accurately actioned and reported upon after completion.

Section 4 - Fixlets, Tasks and Baselines

4.1

Given the need to perform IEM console operations in a customer’s network, and given console access as a non master operator in the customer’s environment, determine whether the use of a fixlet or task is more appropriate for a use case.

4.2

Given the need to perform IEM console operations in a customer’s network, and given console access as a non master operator in the customer’s environment, create, edit, delete a baseline and sychronize the components of a baseline.

Section 5 - Actions

5.1 Given the requirement to understand Default Actions, explain what a Default Action is and how it is used, so that the IBM Endpoint Manager console operator can understand the impact of the Default Action on a fixlet or task.

5.2 Given access to the IBM Endpoint Manager (IEM) console, identify the required options to use to properly take an action, so that a successful action can be taken

5.3

Given access to the IBM Endpoint Manager (IEM) console and the requirement to review the status of the targets for an action, identify the steps required to provide the IEM Console operator with the detailed status for an action, so that the operator can

5.4 Given access to the IEM Console, navigate to the Actions list and review the

various types of “states”, so that you can determine the status of each action.

5.5 Given the failure of an IEM action on a Windows endpoint, use various troubleshooting techniques to determine the failure cause so that remediation can be done to allow for a successful action to be taken.

Page 6: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

Detailed Exam Objectives

Section 1 - IBM Endpoint Manager Architecture

1.1. Given the need to understand IBM Endpoint Manager (IEM) architecture and component configuration, describe the IEM architechure and component configuratuion so that it can be accurately explained to a client.

SUBTASK(S): 1.1.1. IEM server - A collection of interacting services, including application services, a

Web server, and a database server, forming the heart of the IEM system. 1.1.2. IEM Console - The IEM Console allows an authorized user to quickly and simply

distribute content to each computer that needs them without impacting any other computers in the network.

1.1.3. Agent – Agents are installed on every device that you want to manage using IEM. 1.1.4. IEM relay – IEM relays Increase the efficiency of the system. Instead of forcing

each networked computer to directly access the IEM server, relays spread the load. Hundreds to thousands of IBM Endpoint Manager clients can point to a single IEM relay for downloads, which in turn makes only a single request to the server.

1.1.5. Web Reporting – IEM Web Reporting is a high-level Web application that complements and extends the power of IEM. It connects to one or more IEM databases to aggregate and analyze your entire network. It allows you to visualize your data, with both charts and data listings, in any standard web browser

1.2. Given a need to perform patch management on endpoints, define the

supported patching platforms so that systems can be effectively patched. SUBTASK(S): 1.2.1. Windows 1.2.2. Red Hat 1.2.3. OS X 1.2.4. AIX 1.2.5. CentOS 1.2.6. VMWare ESX & ESXi 1.2.7. HP-UX 1.2.8. Solaris 1.2.9. SUSE 1.2.10. Ubuntu 1.3. Given a need to perform supported 3rd party applications on endpoints,

define the supported 3rd party applications so that applications can be effectively patched.

SUBTASK(S):

Page 7: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

1.3.1. Adobe Acrobat Flash Player 1.3.2. Adobe Acrobat 1.3.3. Adobe Reader 1.3.4. Adobe Shockwave Player 1.3.5. Apple iTunes 1.3.6. Apple Quicktime 1.3.7. Google Chrome 1.3.8. Mozilla Firefox 1.3.9. RealPlayer 1.3.10. Skype 1.3.11. Oracle Java Runtime Environment 1.3.12. Winamp 1.3.13. WinZip 1.4. Given a need to troubleshoot agents on endpoints, define the content and

default location of agent logs so that agent log review is possible. SUBTASK(S): 1.4.1. The agent log defines the status of what the agent is doing including:

Relay Registration

Content Applicability

Site Subscriptions

Action Result Status 1.4.2. Windows - C:\Program Files (x86)\BigFix Enterprise\BES

Client\__BESData\__Global\Logs or C:\Program Files \BigFix Enterprise\BES Client\__BESData\__Global\Logs

1.4.3. Linux - /var/opt/BESClient/__BESData/__Global/Logs 1.4.4. OS X - /Library/Application Support/Bigfix/BES Agent/__BESData/__Global/Logs 1.4.5. AIX - /var/opt/BESClient/__BESData/__Global/Logs 1.5. Given a need to troubleshoot agents on endpoints, define the name of the

IEM service so that troubleshooting is possible. SUBTASK(S): 1.5.1. Windows – BES client 1.5.2. Linux - BESClient 1.5.3. OS X - BESAgent 1.5.4. AIX – SBESClientd 1.6. Given the need to ensure certain endpoints cannot be targeted by an action,

define how to lock and unlock an endpoint so that there is an existing mechanism to stop actions from being taken on an endpoint.

SUBTASK(S): 1.6.1. Definition:

Page 8: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

1.6.1.1. Locking a computer lets you exclude specific computers or groups of computers from the effects of fixlet actions. This could be useful if you want to insulate certain development computers from any changes or updates. Client computers can be locked forever until explicitly unlocked.

1.6.2. Lock the endpoint: 1.6.2.1. The end user can use BES Support Task ID 295 – BES Client Setting:

Lock computer to manually lock an endpoint so that actions cannot be taken against it.

1.6.2.2. The end user can also right click on a computer, select Edit Computer Settings, check the Locked box, and hit okay to lock a specific endpoint

1.6.3. Unlock the endpoint: 1.6.3.1. The end user can use BES Support Task ID 296 – BES Client Setting:

Unlock computer to manually unlock an endpoint so that actions can be taken against it.

1.6.3.2. The end user can also right click on a computer, select Edit Computer Settings, uncheck the Locked box, and hit okay to unlock a specific endpoint

1.6.4. Computer Maintenance Window:

1.6.4.1. The end user can use Maintenance Window Dashboard located under BigFix Management -> Maintenance Windows Management in conjunction with BES Support Task ID – 769: Enforce Maintenance Window with Client Locking to automatically manage the locking and unlocking of a computer on a schedule.

Page 9: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

Section 2 - IBM Endpoint Manager Console

2.1. Given the need to troubleshoot missing content in the IBM Endpoint Manager (IEM) Console, perform the steps necessary to clear the cache and refresh the IEM Console so that the console forces an update to the console data.

SUBTASK(S): 2.1.1. In the IEM Console, click “Refresh Console” button to update the console

information. 2.1.2. Determine if expected content is now present in the IEM console. 2.1.3. Select option to clear cache:

2.1.3.1. File -> Preferences -> clear Cache 2.1.4. Restart IEM console. 2.1.5. Login to IEM console and determine if missing content is now present. 2.2. Given the need to search for content in the List Panel of IBM Endpoint

Manager (IEM) Console, log in to the IEM Console and navigate to the List Panel so that you can search for the appropriate information.

SUBTASK(S): 2.2.1. Log in to IEM Console. 2.2.2. Click on anything in the Navigation Tree to show the List panel. Searches can be

performed on anything in the List panel. 2.3. Given the need to update the content of the IEM Console, select the “Refresh

Console” button so that you can refresh the content of the IEM Console. SUBTASK(S): 2.3.1. The Refresh Console button will reload the content from the database for the IEM

Console display. 2.4. Given a need to force a client to check in to IEM server and update

properties in the IEM Console, execute a “Send Refresh” option against a client so that the client will report to the IEM server.

SUBTASK(S): 2.4.1. Explain the agent Send Refresh option.

2.4.1.1. Select the Computer. 2.4.1.2. Select the option “Send Refresh”. 2.4.1.3. The agent Send Refresh option sends a UDP packet telling the client to

report to the IEM server. 2.5. Given the need to show hidden content and show non-relevant content

within the IEM Console, select the box “Show Hidden Content” and “Show Non-Relevant Content” in the IEM console so that you can view all content for the appropriate information.

Page 10: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

SUBTASK(S): 2.5.1. Log in to IEM Console.

2.5.1.1. Select “Show Hidden Content” to show content that has been hidden by an operator.

2.5.1.2. Select “Show Non-Relevant Content” to show all content in the IEM Console regardless of relevance.

2.6. Given the need to navigate in the IEM Console, list the Endpoint manager

domains and their purpose so that the user can efficiently find the items they need in the console.

SUBTASK(S): 2.6.1. All Content – This contains every item that exists in the IEM Console. 2.6.2. BigFix Management – This contains all the content related to the management of

the Endpoint Manager infrastructure. 2.6.3. Endpoint Protection – This contains content related to Anti-Virus, DLP, Device

Management, and Self Network Quarantine. 2.6.4. Mobile Device Management – This contains all content related to the

management of Mobile Devices, such as iOS and Android. 2.6.5. Patch Management – This contains content related to the updating of Operating

systems and specific applications. 2.6.6. Security Configuration – This contains content related to the Security

Configuration Checklists such as DISA STIG, FDCC , and CIS, and also Vulnerability Content.

2.6.7. Systems Lifecycle - This contains content related to Asset Discovery, Inventory, Software Distribution, OS Deployment, Software Usage Analysis, Remote Control.

2.6.8. Server Automation – This contains content related to Virtualization Platform management, using the Automation engine, and middleware content.

2.6.9. BigFix Labs – This contains beta and homegrown content to be used at the user’s own risk.

2.6.10. Certain domains may not be viewable depending upon licensing or permissions. 2.7. Given the need to create a grouping of endpoints, explain the difference

between an automatic and manual group so that the most effective group is used at the appropriate time.

SUBTASK(S): 2.7.1. Definition:

2.7.1.1. A manual group is a group whose members are static, until a user specifically adds or removes an endpoint to the group.

2.7.1.2. An automatic group is a group whose members are dynamically set by some type of membership relevance that can include anything from a value of a property to the membership of another group.

Page 11: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

2.7.2. Addition and removal of members: 2.7.2.1. Manual:

2.7.2.1.1. Addition – an endpoint is added to a manual group, by right clicking on it and selecting add to manual group, and then completing the manual group menus.

2.7.2.1.2. Deletion – a member is removed from a manual group, by right clicking on it and selecting remove from manual group while in the computer group menu item, All Content -> Computer Groups. Computers deleted from the IEM Console are removed from manual groups.

2.7.2.2. Automatic: 2.7.2.2.1. Members are automatically added and removed by the

relevance created for group membership. If an endpoint needs to be included or removed from the group, the relevance will need to be changed.

2.7.2.3. Additional Notes: 2.7.2.3.1. New endpoints will join the Automatic groups when they

become relevant for the group definition. 2.7.2.3.2. Manual groups cannot be exported.

2.8. Given an environment that has enough endpoints to require the grouping of

computers, explain the process for creating, modifying, and deleting computer groups so that an operator can successfully manage their environment.

SUBTASK(S): 2.8.1. Create Groups:

2.8.1.1. Manual: 2.8.1.1.1. From the Tools menu, or from the Computer Group Menu (All

Content -> Computer Groups), right click in the windows containing the existing groups.

2.8.1.1.2. Select Create New Manual Group. 2.8.1.1.3. Enter Group Name and hit Create.

2.8.1.2. Automatic: 2.8.1.2.1. From the Tools menu, or from the Computer Group Menu (All

Content -> Computer Groups), right click in the windows containing the existing groups.

2.8.1.2.2. Select Create New Automatic Group. 2.8.1.2.3. Enter Group Name, select the site in which it should be

created, the domain in which it should be created, use the wizard to create the relevance that will include the endpoints in the group and hit Create.

2.8.2. Delete Groups: 2.8.2.1. In the Computer Group menu, right click on the existing group to remove

and the select remove or after selecting the group, hit the remove button in the bottom window pane.

Page 12: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

2.8.3. Modify Groups: 2.8.3.1. Addition and removal of members:

2.8.3.1.1. Manual: 2.8.3.1.1.1. Addition – an endpoint is added to a manual group,

by right clicking on it and selecting add to manual group, and then completing the manual group menus.

2.8.3.1.1.2. Deletion – a member is removed from a manual group, by right clicking on it and selecting remove from manual group while in the computer groups menu item.

2.8.3.1.2. Automatic: 2.8.3.1.2.1. Members are automatically added and removed

by the relevance created for group membership. If an endpoint needs to be included or removed from the group, the relevance will need to be changed.

2.8.3.2. Editing the group: 2.8.3.2.1. The only modification a manual group allows is if the

membership is determined by console assignment, or by client settings. This can be changed by from the Computer Group menu (All Content -> Computer Groups), right click on the existing group and selecting edit or by selecting the existing group, and hitting edit in the lower pane.

2.8.3.2.2. An automatic group allows you to edit the domain it is in as well as editing the relevance that is determining group membership.. This can be changed by from the Computer Group menu (All Content -> Computer Groups), right click on the existing group and selecting edit or by selecting the existing group, and hitting edit in the lower pane.

2.9. Given the need to identify the patches to which an endpoint is vulnerable,

define ways to see the patch vulnerability status, so an operator can determine which patches are needed to resolve any vulnerability issues.

SUBTASK(S): 2.9.1. Via the Console:

2.9.1.1. Via the Computer View: 2.9.1.1.1. Browse to All Content domain-> Computers in the console. 2.9.1.1.2. Select a computer of which you wish to find a status. 2.9.1.1.3. Select the Relevent Fixlets and Tasks tab. 2.9.1.1.4. Expand the tree on the left to filter as needed, the content will

be displayed in the Work Area. 2.9.1.2. Via the Group View:

2.9.1.2.1. Browse to All Content domain -> Computer Groups in the console.

2.9.1.2.2. Select the computer group for which you wish to find a status.

Page 13: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

2.9.1.2.3. Select the Relevent Fixlets or ApplicableTasks or Relevant Baseline tab.

2.9.1.2.4. Expand the tree on the left to filter as needed; the content will be displayed in the Work Area.

2.9.1.3. Via the Patch Overview Dashboard: 2.9.1.3.1. Browse to Patch Management -> Patch Overview Dashboard. 2.9.1.3.2. Select the patch site in the pull down on the right. 2.9.1.3.3. The dashboard will provide statistics on patch status as well

as the most relevant critical items in the deployment. 2.9.1.4. Via the Content View:

2.9.1.4.1. Via All Content: 2.9.1.4.1.1. Browse to All Content domain-> Fixlets and Tasks. 2.9.1.4.1.2. Expand the tree in the Domain Panel to filter as

needed; the content will be displayed in the List Panel.

2.9.1.4.2. Via Patch Content: 2.9.1.4.2.1. Browse to Patch Management domain. 2.9.1.4.2.2. Select the sub content in the Domain Panel, and

expand the tree as needed, the content will be displayed in the List Panel.

2.9.2. Via Web Reports: 2.9.2.1. Log in to Web Reports. 2.9.2.2. Select Report List. 2.9.2.3. Select Open Vulnerabilities. 2.9.2.4. Filter the report as appropriate.

Page 14: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

Section 3 - Properties and Analyses

3.1. Given the need to perform IBM Endpoint Manager (IEM) Console operations in a customer’s network and console access as a non master operator in the customer’s environment, define managed properties and explain how they can be utilized in the context of action targeting and reporting so that fixlets and tasks can be accurately actioned and reported upon after completion.

SUBTASK(S): 3.1.1. Define a managed property.

3.1.1.1. A Managed Property is a predefined variable and data pair. 3.1.1.2. The data is gathered from endpoints and returned back to the server on a

configurable scheduled frequency. 3.1.1.3. Using a Managed Property allows for establishing regular reporting

intervals without redefining the data points for each report. 3.1.1.4. Managed Properties can be defined by Master and Non Master

Operators, though a Non Master Operator’s ability to action the Property can be limited by his or her computer management rights.

3.1.2. Define a retrieved property.

3.1.2.1. A Retrieved Property is a special kind of Managed Property. Like a Managed Property, a Retrieved Property is a predefined variable and data pair.

3.1.2.2. A Retrieved Property is by default assigned to Action Site and can only be configured by a Master Operator, requiring the property to reside in Action Site.

3.1.2.3. Because of the requirement to reside in Action Site, Retrieved Properties are generally reserved for values that are global to the implementation, or properties that would be defined for the majority of the endpoints.

3.1.2.4. Retrieved Properties can be used as column headers within the IEM console.

3.1.2.5. Retrieved Properties can be used as targeting filters for an action. 3.2. Given the need to perform IEM Console operations in a customer’s network,

and given console access as a non master operator in the customer’s environment so that fixlets and tasks can be accurately actioned and reported upon after completion.

SUBTASK(S): 3.2.1. Explain the methods to view computer properties in the IEM Console.

3.2.1.1. Navigate to an analysis. View the results. 3.2.1.1.1. Log on to the IEM Console. 3.2.1.1.2. Navigate to All Content Domain. 3.2.1.1.3. Navigate to Analyses node. 3.2.1.1.4. Select an analysis from the List Panel. 3.2.1.1.5. Select the results tab in the workspace.

3.2.1.2. View a Retrieved Property as a Console Filter.

Page 15: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

3.2.1.2.1. Log on to the IEM console. 3.2.1.2.2. Navigate to All Content Domain. 3.2.1.2.3. Navigate to Computers node. 3.2.1.2.4. At the top of the List Panel, right click on the column headers.

A dialog will pop giving a list of columns that can be added. 3.2.1.2.5. Select a property name. 3.2.1.2.6. The column will display on the far right in the List Panel of the

console. 3.2.1.2.7. If there are results in the field that can be used for filtering, the

property is receiving returned results from the endpoints. 3.2.1.3. View a Retrieved Property from the Console Edit menu.

3.2.1.3.1. Log on to the IEM Console. 3.2.1.3.2. Navigate to Tools, Manage Properties. 3.2.1.3.3. Properties are viewable in the dialog and can be filtered by

content type for easier navigation. 3.2.2. Explain the method to view computer properties in IEM Web Reports.

3.2.2.1. Log on to Web Reports. 3.2.2.2. Select Explore Data. 3.2.2.3. Select Computers. 3.2.2.4. In the Computers section, select Edit Columns. 3.2.2.5. Select the Property name. 3.2.2.6. The property column is displayed with results for computers that were

targeted with the property. 3.2.3. Explain methods to view computer property definitions in IEM Console.

3.2.3.1. Navigate to an analysis. View the property definitions. 3.2.3.1.1. Log on to the IEM console. 3.2.3.1.2. Navigate to All Content Domain. 3.2.3.1.3. Navigate to Analyses node. 3.2.3.1.4. Select an analysis from the List pane. 3.2.3.1.5. Each property and its definition can be found by selecting the

Details tab. 3.2.3.2. View a Retrieved Property definition from the Console Edit Menu.

3.2.3.2.1. Log on to the IEM Cconsole. 3.2.3.2.2. Navigate to Tools, Manage Properties. 3.2.3.2.3. Select a property. It’s definition will display underneath the

property name. 3.2.4. Explain the methods to verify properties are returning results.

3.2.4.1. Navigate to an analysis. View the results.

3.2.4.1.1. Log on to the IEM Console. 3.2.4.1.2. Navigate to All Content Domain. 3.2.4.1.3. Navigate to Analyses node. 3.2.4.1.4. Select an analysis from the List Panel. 3.2.4.1.5. Select the results tab in the workspace. 3.2.4.1.6. If the results tab displays property names and results, the

property is returning results. 3.2.4.2. Add a Retrieved Property as a Console Filter.

Page 16: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

3.2.4.2.1. Log on to the IEM Console. 3.2.4.2.2. Navigate to All Content Domain. 3.2.4.2.3. Navigate to Computers node. 3.2.4.2.4. At the top of the List Panel, right click on the column headers.

A dialog will pop giving a list of columns that can be added. 3.2.4.2.5. Select a property name. 3.2.4.2.6. The column will display on the far right in the List Panel of the

console. 3.2.4.2.7. If there are results in the field that can be used for filtering, the

property is receiving returned results from the endpoints. 3.2.4.3. View the property results in Web Reports.

3.2.4.3.1. Log on to Web Reports. 3.2.4.3.2. Select Explore Data. 3.2.4.3.3. Select Computers. 3.2.4.3.4. In the Computers section, select Edit Columns. 3.2.4.3.5. Select the Property name. 3.2.4.3.6. Validate that the column is populated with results for

computers that were targeted with the property. 3.2.5. Explain the method to determine the frequency that a Managed Property is

evaluated by an endpoint. 3.2.5.1. In the IEM console, navigate to Tools, Manage Properties.

3.2.5.1.1. Select the property from the list 3.2.5.1.2. The evaluation frequency will be at the bottom of the dialog in

a field next to the word “Evaluate.” 3.2.5.2. In the IEM Console, navigate to All Content Domain.

3.2.5.2.1. Navigate to Analyses. 3.2.5.2.2. Select the analysis from the List Panel. 3.2.5.2.3. In the details for the analysis, locate the managed property

name. 3.2.5.2.4. Underneath the property name will be an interval value next to

the word “Period.” 3.3. Given the need to perform IEM console operations in a customer’s network,

and given console access as a non master operator in the customer’s environment, define managed properties and explain how they can be utilized in the context of action targeting and reporting so that fixlets and tasks can be accurately actioned and reported upon after completion.

SUBTASK(S): 3.3.1. Define an analysis and explain how it is used.

3.3.1.1. An analysis is a collection of one or more managed properties that can be evaluated by an endpoint.

3.3.1.2. The property definition is contained within the analysis. 3.3.1.3. An analysis is IEM Content in that it can be actioned like a fixlet and a

task can be actioned.

Page 17: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

3.3.1.4. An analysis has applicability relevance that determines which endpoints should return results for the properties.

3.3.1.5. An analysis is typically used for collections of like data and is often created as a report souce for content deployment. For example, an analysis for a software deployment might contain three properties. Property A – names of endpoints that are true the software

deployment task applicability relevance. Property B – names of endpoints where the software being

deployed has already been successfully installed along with the installation date.

Property C – names of endpoints where the software was installed but failed, along with the date of most recent attempt, and the failure exit code.

3.3.2. Explain how to create an analysis. 3.3.2.1. Log on to the IEM Console. 3.3.2.2. Navigate to All Content. 3.3.2.3. Navigate to Analyses. 3.3.2.4. In the List Panel, right click and select Create New Analysis. 3.3.2.5. Define the Name. 3.3.2.6. Select the site and domain for the analysis to reside. 3.3.2.7. Populate the Description tab. 3.3.2.8. Populate the Properties tab, multiple properties can be created. Each

must have a name and defintion. Property Name Property Definition

3.3.2.9. Populate the Relevance tab, this is applicability relevance for the entire analysis. All endpoints that resolve to True would return results for the analysis if they are subscribed to the site where the analysis resides.

3.3.2.10. The analysis must be activated in order to return results. By default a newly created analysis will activate on Save.

3.3.2.11. To avoid automatic analysis activation, deselect the Automatically activate this analysis after it is created check box.

3.3.3. Explain how to modify an analysis. 3.3.3.1. Log on to the IEM Console. 3.3.3.2. Navigate to All Content. 3.3.3.3. Navigate to Analyses. 3.3.3.4. Select the analysis in the List Panel. 3.3.3.5. Right-click on the analysis, select Edit. 3.3.3.6. The analysis can be modified. No changes will take place until the

modified analysis has been saved. 3.3.3.7. Note that analyses in external sites may not be modified.

3.3.4. Explain how to delete an analysis. 3.3.4.1. Log on to the IEM Console. 3.3.4.2. Navigate to All Content. 3.3.4.3. Navigate to Analyses. 3.3.4.4. Select the analysis in the List Panel.

Page 18: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

3.3.4.5. Right-click on the analysis, select Delete. 3.3.4.6. Note that analyses in external sites may not be deleted.

Page 19: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

Section 4 - Fixlets, Tasks and Baselines

4.1. Given the need to perform IBM Endpoint Manager (IEM) Console operations in a customer’s network, and given console access as a non master operator in the customer’s environment, determine whether the use of a fixlet or task is more appropriate for a use case.

SUBTASK(S): 4.1.1. Define a fixlet.

4.1.1.1. A fixlet is an object with content that can be applied to one or more endpoints in an IEM environment.

4.1.1.2. A fixlet typically makes configuration changes to an endpoint such as installing a file or modifying an Operating System setting.

4.1.1.3. A fixlet has applicability relevance that forces an endpoint to report whether the content is relevant or not. If relevant, the fixlet can be applied or actioned.

4.1.1.4. A fixlet has configurable success criteria to determine whether the change was successful, or “fixed.” By default, success criteria is that the applicability relevance evaluated to false after the fixlet has been applied.

4.1.1.5. A fixlet is typically used to enforce a policy because the state of the endpoint is checked before and after the fixlet is applied.

4.1.2. List the action states for a fixlet. 4.1.2.1. Once applied, an action will proceed through one or more states. If the

action was applied to a fixlet, the following action status can be defined as: 4.1.2.1.1. Not Relevant - Before running the action, the IEM Client

checked the relevance for the action and it is no longer true. 4.1.2.1.2. Evaluating - The IEM client has received the action targeted at

it and will evaluate the action to see if it is time to run, the issue is still relevant, etc.

4.1.2.1.3. Running - The IEM client is currently running the action. 4.1.2.1.4. Fixed - The IEM client has run the action and the relevance is

now false (meaning that not only did the action run, but it fixed the issue). *This is unique to a fixlet. A task action can not report this status.

4.1.2.1.5. Failed - The IEM client has run the action and the fixlet is still relevant (even if the action ran successfully). Note that in the cases of fixlets, 'Failed' usually means the action script completed successfully, but failed to meet the success criteria. *Failed if the action completed successfully means the applicability relevance still evaluates to True. This issue is unique to a fixlet.

4.1.2.1.6. Locked - The IEM client is in the "Locked" state that prevents it from running actions until unlocked.

Page 20: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

4.1.2.1.7. Pending Download - The IEM client is waiting to receive the complete file. This state will persist until the download makes it to the IEM Server -> IEM Relay -> IEM Client.

4.1.2.1.8. Pending Restart - The action was completed, but the action status of 'Fixed' or 'Failed' cannot be assessed until the computer is restarted. *This is unique to a fixlet. A task action does not typically wait for a restart.

4.1.2.1.9. Waiting - The IEM Client is waiting for some condition to actually run the action. The waiting conditions include: waiting for user input, waiting to retry after failure, waiting for a time/date range, waiting for a distribution time, waiting for a user to login, and waiting until the custom constraints property becomes relevant.

4.1.2.1.10. Restricted - The IEM client can't run the action because the IEM license is expired or the number of computers is exceeded.

4.1.2.1.11. Cancelled - The user clicked the "cancel" button when prompted with a message box.

4.1.2.1.12. Expired - The action expired before the IEM client could run the action.

4.1.2.1.13. Not Reported - No report has yet been received from the endpoint for the action taken. We cannot confirm if the action has been propagated, mirrored, gathered, processed, or reported until this status changes to something else.

4.1.2.1.14. <Error> This result status means the console is not able to process the status report it received from the endpoint. This usually occurs when the server is an earlier version than the client.

4.1.2.1.15. Constrained – When the constraint for the action has not been met.

4.1.3. Define a task. 4.1.3.1. A task is an object with content that can be applied to one or more

endpoints in an IEM environment. 4.1.3.2. A task has no typical definition other than including action script that can

make a change to an endpoint or its client settings. 4.1.3.3. A task has applicability relevance that forces an endpoint to report

whether the task is relevant or not. If relevant, the task can be applied or actioned.

4.1.3.4. A task does not have success criteria. The only success definition for a task is that all lines of the action script have completed successfully.

4.1.3.5. A task is typically not used for policy enforcement. It is often used for one-time configuration changes or situations where the endpoint state does not need to be checked after the task has been applied or executed.

4.1.4. List the action applications and completion states for a task.

Page 21: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

4.1.4.1. Once applied, an action will proceed through one or more states. If the action was applied to a fixlet, the following action status can be defined as: 4.1.4.1.1. Not Relevant - Before running the action, the IEM client

checked the relevance for the action and it is no longer true. 4.1.4.1.2. Evaluating - The IEM client has received the action targeted at

it and will evaluate the action to see if it is time to run, the issue is still relevant, etc.

4.1.4.1.3. Running - The IEM client is currently running the action. 4.1.4.1.4. Failed - The IEM client has run the action and failed at one or

more of the action script lines. 4.1.4.1.5. Locked - The IEM client is in the "Locked" state that prevents it

from running actions until unlocked. 4.1.4.1.6. Pending Download - The IEM client is waiting to receive the

complete file. This state will persist until the download makes it to the IEM Server -> IEM Relay -> IEM client.

4.1.4.1.7. Waiting - The IEM client is waiting for some condition to actually run the action. The waiting conditions include: waiting for user input, waiting to retry after failure, waiting for a time/date range, waiting for a distribution time, waiting for a user to login, and waiting until the custom constraints property becomes relevant.

4.1.4.1.8. Restricted - The IEM client can't run the action because the IEM license is expired or the number of computers is exceeded.

4.1.4.1.9. Cancelled - The user clicked the "cancel" button when prompted with a message box.

4.1.4.1.10. Expired - The action expired before the IEM client could run the action.

4.1.4.1.11. Completed - The action has completed and no other actions are required. *This is unique to a task. A fixlet would report either “fixed,” or “failed,” if it had completed and no other actions were required.

4.1.4.1.12. Not Reported - No report has yet been received from the endpoint for the action taken. We cannot confirm if the action has been propagated, mirrored, gathered, processed, or reported until this status changes to something else.

4.1.4.1.13. <Error> This result status means the console is not able to process the status report it received from the endpoint. This usually occurs when the server is an earlier version than the client.

4.1.4.1.14. Constrained – When the constraint for the action has not been met.

4.2. Given the need to perform IEM Console operations in a customer’s network,

and given console access as a non master operator in the customer’s

Page 22: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

environment, create, edit, delete a baseline and sychronize the components of a baseline.

SUBTASK(S): 4.2.1. Define a baseline.

4.2.1.1. A baseline is a collection of related content that is intended to be targeted at a selection of endpoints.

4.2.1.2. The purpose of a baseline is to streamline the creation and management of actions. For example, rather than create 5 actions for 5 separate fixlets to the same set of endpoints, one action can be created for a baseline containing all 5 fixlets.

4.2.1.3. Each content item inside the baseline, such as a fixlet or task, is referred to as a component of that baseline.

4.2.1.4. If the component has been updated, the baseline requires an update for the new version of that component. Updating a baseline in this manner is sometimes called “synchronizing components.”

4.2.2. List the action states for a baseline. 4.2.2.1. Once applied, an action will proceed through one or more states. If the

action was applied to a baseline, the following action status can be defined as: 4.2.2.1.1. Not Relevant - Before running the action, the IEM client

checked the relevance for the action and it is no longer true. 4.2.2.1.2. Evaluating - The IEM client has received the action targeted at

it and will evaluate the action to see if it is time to run, the issue is still relevant, etc.

4.2.2.1.3. Running - The IEM client is currently running the action. 4.2.2.1.4. Fixed – All the fixlet components of the baseline have

completed successfully. 4.2.2.1.5. Failed - The IEM client has run the action and one or more

fixlets are still relevant (even if the action ran successfully). Note that in the cases of fixlets, 'Failed' usually means the action script completed successfully, but failed to meet the success criteria. *Failed if the action completed successfully means the applicability relevance still evaluates to True. This issue is unique to a fixlet, whether the fixlet is in a baseline or not.

4.2.2.1.6. Locked - The IEM client is in the "Locked" state that prevents it from running actions until unlocked.

4.2.2.1.7. Pending Download - The IEM client is waiting to receive the complete file. This state will persist until the download makes it to the IEM Server -> IEM Relay -> IEM Client.

4.2.2.1.8. Pending Restart - The action was completed, but the action status of 'Fixed' or 'Failed' cannot be assessed until the computer is restarted. *This is unique to fixlet components.

4.2.2.1.9. Waiting - The IEM client is waiting for some condition to actually run the action. The waiting conditions include: waiting

Page 23: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

for user input, waiting to retry after failure, waiting for a time/date range, waiting for a distribution time, waiting for a user to login, and waiting until the custom constraints property becomes relevant.

4.2.2.1.10. Restricted - The IEM client can't run the action because the IEM license is expired or the number of computers is exceeded.

4.2.2.1.11. Cancelled - The user clicked the "Cancel" button when prompted with a message box.

4.2.2.1.12. Expired - The action expired before the IEM client could run the action.

4.2.2.1.13. Not Reported - No report has yet been received from the endpoint for the action taken. We cannot confirm if the action has been propagated, mirrored, gathered, processed, or reported until this status changes to something else.

4.2.2.1.14. <Error> This result status means the console is not able to process the status report it received from the endpoint. This usually occurs when the server is an earlier version than the client.

4.2.2.1.15. Constrained – When the constraint for the action has not been met.

4.2.3. Create a baseline. 4.2.3.1. Add to New Baseline.

4.2.3.1.1. Log on to the IEM Console. 4.2.3.1.2. Navigate to All Content. 4.2.3.1.3. Navigate to Fixlets and Tasks node. 4.2.3.1.4. In the List Panel, right-click on content and select Add to New

Baseline. 4.2.3.2. Create New Baseline.

4.2.3.2.1. Log on to the IEM Console. 4.2.3.2.2. Navigate to All Content. 4.2.3.2.3. Navigate to any node with fixlet or task content. 4.2.3.2.4. In the List Panel, right-click on content and select Create new

Baseline 4.2.3.2.5. Give the baseline a name. 4.2.3.2.6. Select the site and domain for the baseline location. 4.2.3.2.7. Save

4.2.4. Modify a baseline. 4.2.4.1. Deleting or re-arranging baseline content.

4.2.4.1.1. Log on to the IEM Console. 4.2.4.1.2. Navigate to All Content. 4.2.4.1.3. Navigate to Baselines node. 4.2.4.1.4. In the List Panel, right-click on baseline and select Edit. * Note

that subscription baseline content may not be edited. 4.2.4.1.5. The baseline may now be edited. 4.2.4.1.6. Click Save to retain edits.

Page 24: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

4.2.4.2. Add a component to an Existing Baseline.

4.2.4.2.1. Log on to the IEM Console. 4.2.4.2.2. Navigate to All Content. 4.2.4.2.3. Navigate to Fixlets and Tasks node. 4.2.4.2.4. In the List Panel, right-click on content and select Add to

Existing Baseline. 4.2.5. Delete a baseline.

4.2.5.1. Log on to the IEM Console. 4.2.5.2. Navigate to All Content. 4.2.5.3. Navigate to Baselines node. 4.2.5.4. In the List Panel, right-click on baseline and select Remove. * Note that

subscription baseline content may not be removed. 4.2.6. Synchronize the components of a baseline.

4.2.6.1. Edit Baseline. 4.2.6.1.1. Log on to the IEM Console. 4.2.6.1.2. Navigate to All Content. 4.2.6.1.3. Navigate to Baselines node. 4.2.6.1.4. In the List Panel, right-click on baseline and select Edit. * Note

that subscription baseline content may not be edited. 4.2.6.1.5. Select the Components Tab. 4.2.6.1.6. Click “Sync all Components” Button. 4.2.6.1.7. Click Save to retain edits.

4.2.6.2. Via Dashboard. 4.2.6.2.1. Log on to the IEM Console. 4.2.6.2.2. Navigate to All Content. 4.2.6.2.3. Navigate to Dashboards node. 4.2.6.2.4. Navigate to BES Support. 4.2.6.2.5. Select Baseline Synchronization Dashboard. 4.2.6.2.6. In the workspace, select the baseline(s) to synchronize. 4.2.6.2.7. Click the “Sync Baselines” Button. Note: non master operators can only synchronize baselines that they have created.

Page 25: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

Section 5 - Actions

5.1. Given the requirement to understand Default Actions, explain what a Default Action is and how it is used, so that the IBM Endpoint Manager (IEM) Console operator can understand the impact of the Default Action on a fixlet or task.

SUBTASK(S): 5.1.1. Explain how to determine if a fixlet or task have a Default Action.

5.1.1.1. Open the IEM Console. 5.1.1.2. Locate desired fixlet/task. 5.1.1.3. Right click on fixlet/task to see pop-up menu.

5.1.1.3.1. If the “Take Default Action” is enabled, click on it to open the Take Action dialog.

5.1.1.3.2. If the “Take Default Action” is disabled, there is no default action available for this task.

5.1.1.4. Allow for actions to be taken quickly by right clicking on the fixlet/task and selecting “Take Default Action”.

5.1.1.5. Note: if there is not a Default Action set, this usually means that there is some special instruction for the fixlet or task. This will require the operator to review the Description tab to determine the correct course of action.

5.1.2. Explain how the use of the Default Action impacts different functions. 5.1.2.1. Allow for actions to be taken quickly by right clicking on the fixlet/task and

selecting “Take Default Action”. 5.1.2.2. Allow for quick creation of multiple action groups (MAG) by selecting

multiple fixlets/tasks and then right clicking and selecting “Take Default Action”.

5.1.2.3. If added to a Basline, the Default Action is used automatically as the action. If there is no defined Default Action, the desired action has to be manually selected.

5.2. Given access to the IEM Console, identify the options available to execute an

action so that a successful action can be taken. SUBTASK(S): 5.2.1. Explain the use of the Target tab.

5.2.1.1. Select Devices – selectable list of computers that are relevant to the fixlet. 5.2.1.2. Dynamically target by property – the action selects any IEM client

computer with the retrieved property specified. 5.2.1.3. Enter device name – manually entered list of targets to be used by the

action. 5.2.2. Explain the use of the Execution tab.

5.2.2.1. Contraints – allow for the start and end dates/times along with other scheduling requirements.

Page 26: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

5.2.2.2. Behavior – options set for how the action will be performed. This includes failure retry, reapplication, download pre-caching and download staggering.

5.2.2.3. The Execution tab is also used to set up the action as a Policy Action. 5.2.2.3.1. Use the Ends on field to set the expiration of an action. But

deselecting the Ends on checkbox, the action will continue to run until manually stopped.

5.2.2.3.2. Use the Reapply this action section to allow the action to be executed again if it becomes relevant.

5.2.3. Explain the use of the Users tab. 5.2.3.1. Run only when there is no user logged on – only allow action to start

when there is no user logged on to the target system. 5.2.3.2. Run independently of user presence, and display the user interface to the

specified users – will run the action no matter if there is a user logged in or not. Also allows for the selection of user ids for running user interfaces.

5.2.3.3. Run when at least one of the specified users is logged on, and only display the user interface to those users – requires a specified user id to be logged in before the action can be taken.

5.2.4. Explain the use of the Messages tab. 5.2.4.1. Display message before running action – will display an interface to the

user notifying of an action that is going to be taken. 5.2.4.1.1. Set Deadline – allows for a deadline for the action to occur,

once the deadline is reached, the action can be taken automatically or a message is kept topmost until the user accepts the action.

5.2.4.2. Display message while running action - Allows for a message to be displayed while the action is being taken.

5.2.4.3. Note: additional configuration may be required for this to be visible by the end user.

5.2.5. Explain the use of the Offer tab. 5.2.5.1. The Offer tab you can advertise a list of actions (typically optional

patches or updates) to the IEM client user. 5.2.5.2. Note: additional configuration may be required for this to be visible by the

end user. 5.2.6. Explain the use of the Post-Action tab.

5.2.6.1. The Post-Action tab you can set to restart or shut down the client computer after the action has completed.

5.2.7. Explain the use of the Pre-Execution Action Script tab. 5.2.7.1. The Pre-Execution Action Script tab of the Take Multiple Actions dialog

you can create an action script that runs before the chosen set of actions is run.

5.2.8. Explain the use of the Post-Execution Action Script tab 5.2.8.1. The Pre-Execution Action Script tab of the Take Multiple Actions dialog

you can create an action script that runs after the chosen set of actions is run.

Page 27: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

5.2.9. Explain the use of the Applicability tab. 5.2.9.1. The Applicability tab you can specify the criteria to use to judge the

relevance of a Fixlet action. This can be the relevance from the source fixlet/task or custom relevance.

5.2.10. Explain the use of the Name field. 5.2.10.1. Name of the action as it appears in the action list. Entering meaningful

names will help with searching for submitted actions. 5.2.11. Explain the use of Presets.

5.2.11.1. Presets allow for common action options to be saved for use on future actions.

5.3. Given access to the IEM Console and the requirement to review the status of

the targets for an action, identify the steps required to provide the IEM Console operator with the detailed status for an action so that the operator can determine the current status of the targets for an action.

SUBTASK(S): 5.3.1. Open IEM Console. 5.3.2. Navigate to the All Content domain- > Actions. 5.3.3. Search for desired action. 5.3.4. Open action and click on Summary tab. 5.3.5. Review the various statuses.

5.3.5.1. Running: The Action is currently running. 5.3.5.2. Evaluating: The Action is still evaluating its relevance. 5.3.5.3. Failed: The Action has failed to run correctly. 5.3.5.4. Cancelled: The user has canceled the Action. 5.3.5.5. Download Failed: The Action failed to complete the download. 5.3.5.6. Locked: The computer is locked and cannot run the action. 5.3.5.7. Offers Disabled: Offers cannot be presented on the specified client, so

the Action will never run. 5.3.5.8. Waiting: The Action is waiting for a user response. 5.3.5.9. Pending Downloads: The Action is waiting for downloads. 5.3.5.10. Pending Restart: The Action is waiting for a restart from the Client

computer. 5.3.5.11. Pending Message: The Action is waiting for the user to accept the

Action message. 5.3.5.12. Pending Login: The Action is waiting for the user to log in for a user-

assisted Action. 5.3.5.13. Pending Offer Acceptance: The Action is waiting for the user to accept

the offer. 5.3.5.14. Constrained: The Action has been constrained by a Relevance

statement set in the Execution tab of the Take Action Dialog. 5.3.5.15. Expired: The Action has passed its expiration date. 5.3.5.16. Postponed: The Action has been postponed by the client. 5.3.5.17. Invalid Signature: The Action cannot run due to an invalid signature. 5.3.5.18. Not Relevant: The Action is not relevant on this client.

Page 28: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

5.3.5.19. Not Reported: The Action has not reported its success or failure. 5.3.5.20. Error: The Action has resulted in an error. 5.3.5.21. Fixed: The Action has completed, resolving the issue.

5.4. Given access to the IEM Console, navigate to the Actions list and review the

various types of “states” so that you can determine the status of each action. SUBTASK(S): 5.4.1. Open IEM Console. 5.4.2. Navigate to the All Content domain- > Actions. 5.4.3. Search for desired action and review current state.

5.4.3.1. Open – The action is active on one or more computers. It remains open until its expiration date elapses, or an operator stops it.

5.4.3.2. Expired –Expired means that the action has reached the end date and will no longer be executed on the targets.

5.4.3.3. Stopped - The action was stopped by an operator. It remains stopped until its expiration date elapses or it is removed.

5.5. Given the failure of an IEM action on a Windows endpoint, use various

troubleshooting techniques to determine the failure cause so that remediation can be done to allow for a successful action to be taken.

SUBTASK(S): 5.5.1. Ensure the IEM client is running on the target system.

5.5.1.1. Launch “services.msc”. 5.5.1.2. Remotely connect to target system from the Services window. 5.5.1.3. Find “BES Client” service. 5.5.1.4. Start service if not in running state.

5.5.2. Review contents of IEM client log file for possible error messages. 5.5.2.1. Remotely connect to target system. 5.5.2.2. In Windows Explorer, navigate to (default path) “C:\Program Files

(x86)\BigFix Enterprise\BES Client\__BESData\__Global\Logs”. 5.5.2.3. Open most recent file in Notepad. 5.5.2.4. Review log file for error message related to action. Search for action id or

command line. 5.5.3. Review action status for specific target for detailed failure message.

5.5.3.1. Open IEM Console. 5.5.3.2. Navigate to the All Content domain -> Actions. 5.5.3.3. Search for desired action. 5.5.3.4. Open action and click on Target tab. 5.5.3.5. Search for failed target and double click to open the “View Action Info”

dialog. 5.5.3.6. Review the information in the Summary section for detailed information.

5.5.4. Utilize the BES Client Diagnostics utility. 5.5.4.1. Open the IEM Console. 5.5.4.2. Navigate to the All Content domain-> Select the Fixtlets and Task node.

Page 29: Cloud & Smarter Infrastructure Professional Certification ... · Cloud & Smarter Infrastructure Professional Certification Program ... and component configuratuion so that it

5.5.4.3. Filter the List Panel using the word diagnostics. 5.5.4.4. Take action on the task TROUBLESHOOTING:Run BES Client

Diagnostics (353 in the BES Support site). 5.5.4.5. Evaluate the BES Client Diagnostic results.