| Section | Weight | Objectives |
| Topic 1: NGFW and SASE Solution Maintenance and Configuration | 19% | - Maintaining and configuring Prisma Access (Security policies, Profiles, Updates, Upgrades, Monitoring and logging)
- Maintaining and configuring Palo Alto Networks hardware firewalls, VM-Series, CN-Series, and Cloud NGFWs (Security policies, Profiles, Updates, Upgrades)
- Adding, configuring, and maintaining Prisma SD-WAN (Initial ION setup, Pathing, Monitoring and logging)
|
| Topic 2: Infrastructure Management and CDSS | 15% | - Cloud-Delivered Security Services (CDSS) management
- Infrastructure management
|
| Topic 3: NGFW and SASE Solution Functionality | 18% | - User-ID and App-ID configuration
- Cloud-Delivered Security Services (CDSS) configuration (security profiles)
- Security and NAT policy creation
- Describing Palo Alto Networks NGFW and Prisma SASE products for security efficacy
- Monitoring and logging
- Decryption
|
| Topic 4: Platform Solutions, Services, and Tools | 18% | - Explaining the application of CDSS (IoT security, Enterprise DLP, SaaS Security, PAN-OS SD-WAN, Premium GlobalProtect, Advanced WildFire, Advanced Threat Prevention, Advanced URL Filtering, Advanced DNS)
- Explaining aligning AIOps to Palo Alto Networks best practices (Administration of AIOps, Dashboards, Best Practice Assessment)
|
| Topic 5: Network Security Fundamentals | 16% | - Differentiating between slow and fast path packet inspection
- Applying network hardening techniques (Content-ID, Zero Trust, User-ID, Cloud Identity Engine, Device-ID, network zoning)
- Application layer inspection for Strata and SASE products
- Use of decryption methods (SSL Forward Proxy, SSL Inbound Inspection, SSH Proxy, no decryption)
|
| Topic 6: Connectivity and Security | 14% | - Maintaining connectivity and security for remote users (remote access solutions, network segmentation, security policy tuning, monitoring, logging, certificate usage)
- Maintaining and configuring network security across on-premises, cloud, and hybrid environments
- Network segmentation, security and network policies, monitoring, logging, and certificate management
|