PALO ALTO NETWORKS
PCNSC
STUDY GUIDE
April 2020
,Palo Alto Networks, Inc.
www.paloaltonetworks.com
© 2017-2020 Palo Alto Networks – all rights reserved.
Aperture, AutoFocus, GlobalProtect, Palo Alto Networks, PAN-OS, Panorama, Traps, and WildFire are trademarks of Palo Alto Networks, Inc. All other
trademarks are the property of their respective owners.
PALO ALTO NETWORKS CERTIFIED NETWORK SECURITY CONSULTANT STUDY GUIDE 2
, Table of Contents
Palo Alto Networks PCNSC Study Guide ................................................ 6
Overview .................................................................................................................6
Prerequisites ............................................................................................................6
Exam Format ...........................................................................................................6
How to Take This Exam .........................................................................................7
Preparation Resources.............................................................................................7
CPSP Program ........................................................................................................7
Exam Domains and Objectives ................................................................. 8
1 Next-Generation Firewall ....................................................................................8
1.1 Given customer requirements, identify the appropriate high availability configuration. .................. 8
1.2 Given customer network requirements, determine the deployment model. ...................................... 9
1.3 Given a customer scenario, what changes need to be made to the initial configuration to identify
and solve the problem? .......................................................................................................................... 10
1.4 Given a customer environment, ensure notifications. ...................................................................... 11
1.5 Identify the configuration practices that allow for ease of operations. ............................................ 11
1.6 Given a scenario, identify the connectivity challenges. ................................................................... 11
1.7 Managing content updates. .............................................................................................................. 12
1.8 Identify methods of keeping firewalls and Panorama up-to-date. ................................................... 12
2 Advanced Panorama ..........................................................................................12
2.1 Given a customer scenario, what changes need to be made to the current configuration to identify
and solve the problem? .......................................................................................................................... 12
2.2 Given a customer environment, identify the configuration management design that meets the
requirements. ......................................................................................................................................... 13
2.3 Given a scenario, identify the proper Panorama architecture. ......................................................... 13
2.4 Identify activities that secure communications between the NGFW and Panorama. ...................... 14
2.5 Given a RBAC scenario, configure the access and permissions based on requirements................. 14
2.6 Given a customer failure, solve the problem using native PAN-OS tools....................................... 15
2.7 Identify options to export specific reporting requirements from Panorama. ................................... 15
2.8 Given a customer environment, identify the appropriate logging architecture................................ 16
3 Migration Techniques ........................................................................................16
3.1 Identify the potential conflicts in the customer source file. ............................................................. 16
3.2 Identify migration requirements. ..................................................................................................... 16
3.3 Analyze customer data migration. ................................................................................................... 16
PALO ALTO NETWORKS CERTIFIED NETWORK SECURITY CONSULTANT STUDY GUIDE 3
PCNSC
STUDY GUIDE
April 2020
,Palo Alto Networks, Inc.
www.paloaltonetworks.com
© 2017-2020 Palo Alto Networks – all rights reserved.
Aperture, AutoFocus, GlobalProtect, Palo Alto Networks, PAN-OS, Panorama, Traps, and WildFire are trademarks of Palo Alto Networks, Inc. All other
trademarks are the property of their respective owners.
PALO ALTO NETWORKS CERTIFIED NETWORK SECURITY CONSULTANT STUDY GUIDE 2
, Table of Contents
Palo Alto Networks PCNSC Study Guide ................................................ 6
Overview .................................................................................................................6
Prerequisites ............................................................................................................6
Exam Format ...........................................................................................................6
How to Take This Exam .........................................................................................7
Preparation Resources.............................................................................................7
CPSP Program ........................................................................................................7
Exam Domains and Objectives ................................................................. 8
1 Next-Generation Firewall ....................................................................................8
1.1 Given customer requirements, identify the appropriate high availability configuration. .................. 8
1.2 Given customer network requirements, determine the deployment model. ...................................... 9
1.3 Given a customer scenario, what changes need to be made to the initial configuration to identify
and solve the problem? .......................................................................................................................... 10
1.4 Given a customer environment, ensure notifications. ...................................................................... 11
1.5 Identify the configuration practices that allow for ease of operations. ............................................ 11
1.6 Given a scenario, identify the connectivity challenges. ................................................................... 11
1.7 Managing content updates. .............................................................................................................. 12
1.8 Identify methods of keeping firewalls and Panorama up-to-date. ................................................... 12
2 Advanced Panorama ..........................................................................................12
2.1 Given a customer scenario, what changes need to be made to the current configuration to identify
and solve the problem? .......................................................................................................................... 12
2.2 Given a customer environment, identify the configuration management design that meets the
requirements. ......................................................................................................................................... 13
2.3 Given a scenario, identify the proper Panorama architecture. ......................................................... 13
2.4 Identify activities that secure communications between the NGFW and Panorama. ...................... 14
2.5 Given a RBAC scenario, configure the access and permissions based on requirements................. 14
2.6 Given a customer failure, solve the problem using native PAN-OS tools....................................... 15
2.7 Identify options to export specific reporting requirements from Panorama. ................................... 15
2.8 Given a customer environment, identify the appropriate logging architecture................................ 16
3 Migration Techniques ........................................................................................16
3.1 Identify the potential conflicts in the customer source file. ............................................................. 16
3.2 Identify migration requirements. ..................................................................................................... 16
3.3 Analyze customer data migration. ................................................................................................... 16
PALO ALTO NETWORKS CERTIFIED NETWORK SECURITY CONSULTANT STUDY GUIDE 3