I can help with point 3. There are 2 courses available from McAfee 101 and 201. I only took 101 and passed the exam. My advice, go through the ESM manual, 1-2 times and you should be able to take the exam.
As for what are most important areas, there isn't really a SINGLE most important area, the questions vary from data source configuration, to compliance, to features available and more. That's why I suggested above that the manual should be enough. There will not be advanced questions which the Platinum guys help with.
Thank you for you kind information.
Can I have any links to download McAfee 101 or 201 ? or can I have a link to download ESM manual ? If you have any PDF documents please kind to share it with me. I like this subject most so kind to help.
He is most probably referring to the product guide which is public https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/ 26000/PD26482/en_US/esm_960_pg_en-us.pdf
As for the 101 and 201 they are confidential and provided only if you take the course.
I would highly recommend taking the 101 course.
Product guide from ESM 9.6 will be.... inappropriate
Questions were from the 9.3 version.
Please look at the end of this guide:
You can find a sample exam items.
Thank you proxima for your kind information.
Did you pass the exam ??
Try to go for following topics:-
1.) What is the function of ESM, ELM, ERC, ACE, ADM?
2.) Storage option available on Each component.
3.) ADM integration and on which layer it operates.
4.) Port number used for communication between different components.
5.) Encryption technique used.
6.) Authentication supported.
7.) Default users for reporting.
8.) Compression Ration at ELM.
9.) Different Aggregation levels at ERC(Event and Flow Aggregation).