• Understand how to con铿乬ure APP-ID.
• Understand the purpose and usage of Content-ID.
• Understand the purpose and usage of User-ID.
• Understand the purpose and usage of captive
• Understand the purpose and usage of Device-ID.
• Understand security
• Understand form factors of the
• Understand the management implications of the form factors of the
• Understand use of Authentication Policy.
• Understand uses for Prisma
• Understand uses for Panorama.
• Understand the uses for CN-Series and VM-Series.
• Understand GlobalProtect.

Task 1.2聽聽 Identify the order of operations of Single-Pass Parallel Processing architecture.

• Describe signature processing
• Describe the security processing
• Describe network processing
• Understand the impact of traf铿乧 铿俹w.

• Understand the use of management user
• Understand the methods of
• Understand the access
• Understand identity management traf铿乧 铿俹w.

Task 2.2聽 Provisioning local administrators and assigning role-based authentication

• Assign role-based access control to
• Assign authentication for
• Assign the authentication sequence for

Task 2.3聽 De铿乶e 铿乺ewall con铿乬urations

• Manage running con铿乬uration.
• Manage candidate con铿乬uration.
• Understand when to use load, save, import and

Task 2.4聽 Understand how to push policy updates to Panorama managed FWs

• Understand device groups and
• Understand where to place
• Understand implications of Panorama
• Understand how to backup Panorama con铿乬urations and NGFW from Panorama.

Task 2.5聽 Identify the types of dynamic updates and their purpose

• Understand the impact of dynamic updates to existing security policies.

Task 2.6聽 Identify what a security zone is and how to use it

• Identify zone
• Identify which zones to apply for security

Task 2.7聽 聽 Identify and con铿乬ure 铿乺ewall interfaces

• Identify and understand the different types of
• Identify how interface types affect security
• Identify how interface types affect security

Task 2.8聽 Con铿乬ure a virtual router

• Identify steps to create a static
• Understand how to use the routing
• Identify steps to con铿乬ure a virtual
• Identify what interface types can be added to a virtual
• Understand how to con铿乬ure route

• Apply address objects to
• Create address
• Identify how to tag
• Differentiate between the address

Task 3.2聽 Identify how to create services.

• Apply services to
• Create service

Task 3.3聽 Identify how to use pre-de铿乶ed Palo Alto Networks external dynamic lists

• Identify how to implement an exception to a prede铿乶ed
• Identify how to apply in security

Task 3.4聽 Con铿乬ure application 铿乴ters and application groups

• Differentiate between application 铿乴ters and groups and when to use
• Include an application 铿乴ter in
• Include an application group in
• Identify the purpose of application characteristics as de铿乶ed in the App-ID

• Identify an appropriate APP-ID
• Understand rule
• Group rules by
• Identify the potential impact of App-ID updates to existing security policy

Task 4.2聽 Identify the purpose of speci铿乧 security rule types

• Identify when to use interzone
• Identify when to use intrazone
• Identify when to use universal

Task 4.3聽 Identify and con铿乬ure Security policy match conditions, actions, and logging options

• Identify and con铿乬ure Security policy match conditions, and
• Understand how to use Application Filters and
• Understand how to use logging

Task 4.4聽 Identify and implement proper NAT policies

• Implement a destination
• Implement a source
• Differentiate various NAT
• Create a NAT in the proper order based on pre-existing

Task 4.5聽 Identify the tools available to optimize Security policies

• Identify the policy test match
• Identify the policy
• Identify

• Differentiate between different types of security pro铿乴es.
• Identify how to create and modify a Security Pro铿乴e.
• Identify how to add a Security Pro铿乴e to
• Identify how to create a pro铿乴e
• Identify how to add a security pro铿乴e group to

Task 5.2聽 Identify the difference between Security policy actions and Security Pro铿乴e actions

• Differentiate between traf铿乧 logs, threat logs and data
• Differentiate between security pro铿乴e

Task 5.3聽 Identify how the 铿乺ewall can use the cloud DNS Security to control traf铿乧 based on domains

• Identify where to con铿乬ure DNS
• Identify how to apply DNS security in

Task 5.4聽 Identify how the 铿乺ewall can use the PAN-DB database to control traf铿乧 based on websites

• Identify how to apply a URL pro铿乴e in a security
• Identify how to create a URL 铿乴tering pro铿乴e.

Task 5.5聽 Identify how to control access to speci铿乧 URLs using custom URL 铿乴tering categories

• Identify why a URL was
• Identify how to allow a blocked
• Identify how to request a URL

Task 5.6聽 Differentiate between group mapping and IP to user mapping within policies and logs

• Identify how to control access to speci铿乧
• Identify how to apply to speci铿乧
• Identify users within the ACC and the monitor