Core Concepts 12%

1.1 Identify how Palo Alto Networks products work together to improve PAN-OS services

• 1.1.1 Security components
• DNS security
• Threat Prevention
• URL filtering
• 1.1.2 Firewall components
• 1.1.3 Panorama components
• 1.1.4 PAN-OS subscriptions and the features they enable
• 1.1.5 Plug-in components
• resources
  • ZTP
  • ZTP in details with quiz questions
  • Panorama Cloud Connector
  • Device Telemetry
  • Device ID full story
• 1.1.6 Heatmap and BPA reports
• 1.1.7 Artificial intelligence operations (AIOps)/Telemetry
• 1.1.8 IPv6
  • IPv6 overview
  • IPv6 addressing
  • NAT
  • NPTv6
  • NAT64
• 1.1.9 Internet of things
  • IOT getting started and administration
  • Device ID
  • IOT Best Practice
  • Quiz

1.2 Determine and assess appropriate interface or zone types for various environments

• 1.2.1 Layer 2 interfaces
• 1.2.2 Layer 3 interfaces
• 1.2.3 Virtual wire (vwire) interfaces
• 1.2.4 Tap interfaces
• 1.2.5 Subinterfaces
• 1.2.6 Tunnel interfaces
• 1.2.7 Aggregate interfaces
• 1.2.8 Loopback interfaces
• 1.2.9 Decrypt Mirror Interfaces
  • Decrypt mirror interfaces
  • Decryption mirror versus Decryption Broker
  • PCNSE questions relating to decryption mirror
  • Decryption Logs
  • Decryption Configuration
• 1.2.10 VLAN interfaces

1.3 Identify decryption deployment strategies

• Decryption Basics
• TLS 1.3
• Prepare to deploy decryption
• 1.3.1 Risks and implications of enabling decryption
• 1.3.2 Use cases
• 1.3.3 Decryption types
• 1.3.4 Decryption profiles and certificates
• 1.3.5 Create decryption policy in the firewall
• 1.3.6 Configure SSH Proxy

1.4 Enforce User-ID

• 1.4.1 Methods of building user-to-IP mappings
• resources
  • Methods of mapping IP addresses to users
  • Methods of mapping IP address to users Quiz
  • User ID redistribution methods
  • Prisma Access Redistribution
• 1.4.2 Determine if User-ID agent or agentless should be used
  • Overview
  • Agentless Procedure
• 1.4.3 Compare and contrast User-ID agents
• 1.4.4 Methods of User-ID redistribution
• resources
  • User redistribution from firewall to panorama
• 1.4.5 Methods of group mapping
• 1.4.6 Server profile & authentication profile
• User ID Quiz
• Dynamic user group and auto tagging

1.5 Determine how and when to use the Authentication policy

• 1.5.1 Purpose of, and use case for, the Authentication policy
• Authentication Policy
• SAML authentication
• resources
  • Authentication policy and data redistribution
• 1.5.2 Dependencies
• 1.5.3 Captive portal versus GlobalProtect (GP) client

1.6 Differentiate between the fundamental functions that reside on the management plane and data plane

1.7 Define multiple virtual systems (multi-vsys) environment

• Intra Vsys Communication
• Shared Gateway versus external zone
• Shared gateway configuratoin
• Share user-id across vsys
• 1.7.1 User-ID hub
• resources
  • Simplify User-id hub
• 1.7.2 Inter-vsys routing
• resources
  • Intervsys routing tips
• 1.7.3 Service routes
• 1.7.4 Administration
• Quiz

QoS

• QOS with Quiz

Zone Defense

• Zone Defenses with quiz

DNS

• DNS Security and Advanced Security

Advanced Threat Prevention

• Advanced Threat Prevention