|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/palo-alto-networks-cybersecurity-practitioner-certification-p/
课程评论：没有评论
**课程名称：** Palo Alto Networks 网络安全实践者认证 2025 **课程概述：** 本课程旨在为参加 Palo Alto Networks 网络安全实践者考试的学员提供全面的知识体系，深入覆盖考试大纲中的所有关键领域。通过学习，学员将能够： * **掌握网络安全基础概念：** 理解 AAA（认证、授权、审计）框架，熟悉 MITRE ATT&CK 框架以识别和应对高级持续性威胁（APT）、网络钓鱼、僵尸网络等各类威胁向量，并了解移动设备安全管理。 * **深入了解网络安全：** 掌握 TLS/SSL 加密与解密过程，熟悉 IPS、DLP、DNS 安全、CASB 等关键网络安全工具。理解下一代防火墙（NGFW）的部署位置和局限性，并熟悉 Palo Alto Networks 的云交付安全服务（CDSS）和 Prisma SASE。 * **精通终端安全：** 认识传统基于签名的安全方案的局限性，理解 EDR、MDR、XDR（包括 Cortex XDR）的概念，以及 ITDR（身份威胁检测与响应）的原理。 * **熟练运用云安全：** 探索不同云架构（主机、容器、无服务器）的安全策略，应对多云环境的安全挑战。了解 CNSP（云原生安全平台）的核心组件，并掌握如何利用 Prisma Cloud 进行威胁检测。 * **提升安全运营能力：** 学习主动和被动流量监控技术，理解 SIEM、SOAR、ASM 平台的功能，并熟悉 Cortex 安全解决方案（Cortex XSOAR、Cortex Xpanse、Cortex XSIAM）的应用。 本课程将帮助学员全面了解 Palo Alto Networks 生态系统中的关键技术和解决方案，为通过网络安全实践者认证考试奠定坚实的基础。
The exam provides extensive coverage across all key domains of the Palo Alto Networks Cybersecurity Practitioner exam blueprint, ensuring a thorough understanding of the required competencies:Cybersecurity Concepts (24% of exam weight):Fundamentals of the AAA (Authentication, Authorization, and Accounting) framework.Basics of the MITRE ATT & CK framework for understanding adversary tactics and techniques.Identification of various threat vectors, types of phishing attacks, characteristics of botnets, and Advanced Persistent Threats (APTs).Security considerations and practices for mobile device management.Network Security (22% of exam weight):Detailed understanding of TLS (Transport Layer Security) processes and SSL/TLS decryption techniques.Familiarity with essential network security tools such as Intrusion Prevention Systems (IPS), Data Loss Prevention (DLP), DNS Security, and Cloud Access Security Brokers (CASB).Concepts related to Next-Generation Firewall (NGFW) placement and their inherent limitations.Insights into Palo Alto Networks Cloud-Delivered Security Services (CDSS) and Prisma SASE (Secure Access Service Edge).Endpoint Security (19% of exam weight):Understanding the limitations associated with traditional signature-based security solutions.Concepts of Endpoint Detection and Response (EDR), Managed Detection and Response (MDR), and Extended Detection and Response (XDR), including specific solutions like Cortex XDR.Principles of Identity Threat Detection and Response (ITDR).Cloud Security (19% of exam weight):Exploration of various cloud architectures, including host-based, containerized, and serverless environments.Challenges inherent in securing multicloud deployments.Core components that constitute a Cloud Native Security Platform (CNSP).Methods for threat detection utilizing Prisma Cloud.Security Operations (16% of exam weight):Techniques for both active and passive traffic monitoring.Understanding of Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), and Attack Surface Management (ASM) platforms.Overview of Cortex security solutions, including Cortex XSOAR, Cortex Xpanse, and Cortex XSIAM.
