Week 1— Troubleshoot
7 days- Study →
Troubleshoot
The Troubleshoot domain (11%) covers diagnosing PAN-OS and Panorama issues: traffic flow failures, GlobalProtect connectivity, decryption problems, and commit or HA errors. The exam presents scenario-based questions asking you to identify the root cause from CLI output, logs, or GUI state, then select the correct diagnostic command or fix.
📅 Days 1–7🎯 ~3 questions/day⚖ 11% of exam- ✓Reading 'show session all filter' and 'test security-policy-match' output to trace dropped traffic
- ✓Using 'show system logdb-quota' and log forwarding to isolate logging pipeline failures
- ✓Diagnosing GlobalProtect tunnel failures via 'show global-protect-gateway statistics' and gateway logs