Exam Vouchers: Palo Alto Networks: Certified Network Security Analyst (PAN-CNSA)

The Palo Alto Networks Certified Network Security Analyst certification validates the knowledge and skills required of analysts and administrators in the areas of object configuration, policy creation, and centralized management using Strata CloudManager (SCM).

Target Audience

This exam is designed for individuals who want to demonstrate technical knowledge and skills in the configuration of firewalls and subscriptions, as well as in management and operations in a network security environment.

Palo Alto Networks certification exam items are developed and approved by exam development experts in conjunction with subject matter experts (SMEs) who represent a broad spectrum of roles relevant to each certification. Each item is referenced to a publicly available technical or scholarly source.

Exam:

Duration: 90 minutes

Format: Multiple-choice questions

Language: English

Candidates should be able to demonstrate knoweldge of:

• Object configuration creation and application.
• Policy creation and application.
• Centralized management, and operations using Strata Cloud Manager (SCM) and Strata Logging Service.
• Ability to improve security posture and perform troubleshooting.

1. Object Configuration Creation and Application 30%

• Create and apply security profiles and security profile groups
• Create and apply decryption profiles
• Create and apply external dynamic lists
• Create and apply custom objects (e.g., URL categories, signatures, data patterns)
• Create and apply Log Forwarding profile
• Create and apply data security profiles
• Create and apply internet of things (IoT) security profiles
• Create and apply DoS protection profile
• Create and apply SD-WAN profiles and template

Policy Creation and Application 30%

• Create and apply Security policies (i.e., App-ID, User-ID, Content-ID)
• Create and apply NAT policies
• Create and apply decryption policies
• Create and apply application override policies
• Create and apply Policy Based Forwarding (PBF) policies
• Create and apply SD-WAN routing and service-level agreement (SLA) policies

Management and Operations 26%

• Use centralized management system
• Strata Cloud Manager (SCM)
• Folders and snippets
• Automations and variables
• Strata Logging Service
• Use Command Center, Activity Insights, and Policy Optimizer to improve security posture
• Use Log Viewer and the Incidents and Alerts page to remediate incidents and alerts

Troubleshooting 14%

• Troubleshoot misconfigurations across all management and on-box options
• Troubleshoot runtime and commit / push errors
• Troubleshoot device usage and health

Recommended Completion of the following Learning Path

• PAN-OS: Features
• Decryption: Features
• Panorama: Features
• Strata Logging Service: Features
• Strata Cloud Manager: Features
• IoT Securty: Features
• Advanced SD-WAN: Features
• Next-Generation CASB: Features