Palo Alto Networks Cybersecurity Practitioner — Information & Free Practice
US · Examination information
100 free questions · Answer explanations · No signup required
Palo Alto Networks Cybersecurity Practitioner
- Provider
- Pearson VUE
- Format
- English, computer-scored multiple-choice certification examination; new appointments at in-person Pearson VUE test centers.
- Time limit
- 90 minutes; the published 30-minute ESL extension applies by default in non-English-speaking testing countries.
- Passing score
- 860 on the 300–1000 scaled-score scale; results remain provisional pending official review/data forensics.
- Exam fee
- US$150; prices may vary by country and additional taxes or fees may apply.
Examination outline
Cybersecurity (19%)
- Identify the components of the authentication, authorization, and accounting (AAA) framework
- Categorize techniques used by malicious actors as defined by the MITRE ATT&CK framework
- Explain the concept of Zero Trust and define its key principles
- Identify and describe the characteristics of an advanced persistent threat (APT)
- Explain the function of common security technologies
Network Security (19%)
- Describe key characteristics of Zero Trust Network Access (ZTNA)
- Explain the function of stateless firewalls and next-generation firewalls (NGFWs)
- Explain the purpose of microsegmentation
- Explain the purpose and function of common network security technologies
- Explain the limitations of signature-based network protection
- Identify and describe the deployment options for NGFWs for networks operation on both bare metal and virtualized architectures
- Identify and describe cybersecurity concerns unique to Operation Technology (OT) and internet of things (IoT) devices
- Identify and describe Palo Alto Networks Cloud-Delivered Security Services (CDSS)
- Explain the security function of Precision AI
Secure Access (14%)
- Define and explain Secure Access Service Edge (SASE) and differentiate from Secure Service Edge (SSE)
- Identify challenges related to confidentiality, integrity, and availability of information and applications
- Explain the security function of common technologies
- Describe the purpose of Software-Defined Wide Area Networking (SD-WAN) solutions
- Describe Prisma SASE solutions
Cloud Security (20%)
- Identify and describe major cloud architectures and topologies
- Identify and describe major challenges related to cloud security
- Identify and describe technologies used to secure cloud environments (e.g. CSPM, CWPP)
- Identify and describe the functions of a Cloud Native Application Protection Platform (CNAPP)
- Explain the features and functionality of Cortex Cloud
Endpoint Security (15%)
- Identify and explain Indicators of Compromise (IOCs)
- Explain the limitations of signature-based anti-malware software
- Explain the concept of User and Entity Behavior Analytics (UEBA)
- Explain endpoint detection and response (EDR) and extended detection and response (XDR)
- Explain Behavioral Threat Prevention
- Identify and describe cybersecurity threats mitigated by the following endpoint security technologies
- Explain the features and functionality of Cortex XDR
Security Operations (13%)
- Identify and describe key characteristics of threat hunting
- Explain the process and outcomes of incident response
- Explain the functions of a security information and event management (SIEM) platform
- Explain the functions of security orchestration, automation, and response (SOAR)
- Explain the function of an Attack Surface Management (ASM) platform
- Explain the features and functionality of Cortex solutions
- Identify and describe the services provided by Unit 42
Examination sources
- Cybersecurity Practitioner Datasheet
p. 5, Recommended Preparation, controlling scope statement
- Cybersecurity Practitioner certification page
Recommended Training; Download datasheet link to practitioner-datasheet.pdf
- Cybersecurity Practitioner Datasheet
p. 2, Blueprint
- Cybersecurity Practitioner Datasheet
p. 3, Blueprint, domain 1 header and tasks 1.1–1.5.3
- Cybersecurity Practitioner Datasheet
p. 3, Blueprint, domain 2 header and tasks 2.1–2.9
- Cybersecurity Practitioner Datasheet
pp. 3–4, Blueprint, domain 3 header and tasks 3.1–3.5.6
- Cybersecurity Practitioner Datasheet
p. 4, Blueprint, domain 4 header and tasks 4.1–4.5
- Cybersecurity Practitioner Datasheet
p. 4, Blueprint, domain 5 header and tasks 5.1–5.7
- Cybersecurity Practitioner Datasheet
p. 5, Blueprint, domain 6 header and tasks 6.1–6.7
- Palo Alto Networks Certification Handbook
p. 5, Exam Scoring and Official Score Report
- Palo Alto Networks Certification Handbook
p. 5, What Is a Scaled Score?
- Palo Alto Networks Certification Handbook
p. 4, Pretest Questions
- Palo Alto Networks Certification Handbook
p. 5, Exam Scoring and Official Score Report, provisional results paragraph
- Palo Alto Networks Certification Handbook
p. 3, How to Schedule Your Exam with Pearson
- Important Update: Enhancing the Value of Your Palo Alto Networks’ Certification
Main announcement, examination delivery change and transition exception
- Palo Alto Networks Certification Handbook
p. 3, Pearson Minor Requirements
- Palo Alto Networks Certification Handbook
p. 3, legal name and business email instructions
- Cybersecurity Practitioner Datasheet
p. 5, English as a Second Language (ESL) Accommodation
Related license preparation
This examination may be required or accepted as an alternative, depending on the license and application pathway.