Device Management and Services
1. Demonstrate knowledge of firewall management interfaces
2. Provision local administrators
3. Assign role-based authentication
4. Maintain firewall configurations
5. Push policy updates to Panorama-managed firewalls
6. Schedule and install dynamic updates
7. Create and apply security zones to policies
8. Identify and configure firewall interfaces
9. Maintain and enhance the configuration of a virtual or logical router
Managing Objects
1. Create and maintain address and address group objects
2. Create and maintain services and service groups
3. Create and maintain external dynamic lists
4. Configure and maintain application filters and application groups
Policy Evaluation and Management
1. Develop the appropriate application-based Security policy
2. Differentiate specific security rule types
3. Configure Security policy match conditions, actions, and logging options
4. Identify and implement proper NAT policies
5. Optimize Security policies using appropriate tools
Securing Traffic
1. Compare and contrast different types of Security profiles
2. Create, modify, add, and apply the appropriate Security profiles and groups
3. Differentiate between Security profile actions
4. Use information available in logs
5. Enable DNS Security to control traffic based on domains
6. Create and deploy URL-filtering-based controls
7. Differentiate between group mapping and IP-to-user mapping within policies and logs
Create and configure file systems
1. Create, mount, unmount, and use vfat, ext4, and xfs file systems
2. Mount and unmount network file systems using NFS
3. Extend existing logical volumes
4. Create and configure set-GID directories for collaboration
6. Configure disk compression
7. Manage layered storage
8. Diagnose and correct file permission problems
Deploy, configure, and maintain systems
1. Schedule tasks using at and cron
2. Start and stop services and configure services to start automatically at boot
3. Configure systems to boot into a specific target automatically
4. Configure time service clients
5. Install and update software packages from Red Hat Network, a remote repository, or from the local file system
6. Work with package module streams
7. Modify the system bootloader
Manage basic networking
1. Configure IPv4 and IPv6 addresses
2. Configure hostname resolution
3. Configure network services to start automatically at boot
4. Restrict network access using firewall-cmd/firewall
Manage users and groups
1. Create, delete, and modify local user accounts
2. Change passwords and adjust password aging for local user accounts
3. Create, delete, and modify local groups and group memberships
4. Configure superuser access
Manage security
1. Configure firewall settings using firewall-cmd/firewalld
2. Create and use file access control lists
3. Configure key-based authentication for SSH
4. Set enforcing and permissive modes for SELinux
5. List and identify SELinux file and process context
6. Restore default file contexts
7. Use boolean settings to modify system SELinux settings
8. Diagnose and address routine SELinux policy violations
Manage containers
1. Find and retrieve container images from a remote registry
2. Inspect container images
3. Perform container management using commands such as podman and skopeo
4. Perform basic container management such as running, starting, stopping, and listing running containers
5. Run a service inside a container
6. Configure a container to start automatically as a systemd service
7. Attach persistent storage to a container
(India)