Palo Alto Networks Certified Cybersecurity Practitioner — Requirements & Free Practice
US · License preparation
100 free questions · Answer explanations · No signup required
Loading selected examination banks…
Choose what to practice
Start with an exam below. Your examination requirements depend on your application pathway. View licensing requirements
Licenses, application pathways and examination requirements
Each license and applicant pathway has its own requirements and exemptions. Choosing practice questions does not determine your eligibility.
Palo Alto Networks Certified Cybersecurity Practitioner
Foundational certification validating cybersecurity knowledge and basic application of Palo Alto Networks solutions across cybersecurity, network security, secure access, cloud security, endpoint security, and security operations.
Licensing authority: Palo Alto Networks · Application information
Initial by examination
- Award
- Pass the Cybersecurity Practitioner examination; results remain provisional until the official review/data-forensics process clears them. Accept the digital badge and download the certificate through Credly.
- Candidate Agreement
- Candidates must comply with the Certification Handbook, accept the Candidate Agreement, and satisfy applicable identification and test-center rules.
- Credential Validity
- An earned certification is valid for two years from passing; this personal validity period is not an examination-version retirement date.
- Minor Candidates
- Under-18 candidates require parent/guardian identification and consent to recording at check-in, and candidate government-issued ID or student ID under the handbook policy.
- Preparation
- The official learning path and courses are recommended preparation. The datasheet expects working knowledge of secure networking, endpoint security, cloud security, security operations, the cybersecurity lifecycle, Palo Alto Networks platform solutions, and emerging security trends; recommended work experience is None; entry-level.
- Registration
- Book through Pearson using a legal name matching identification; select the examination, test center, and available day/time. Appointments may be made in advance or on the testing day, subject to availability. Current new bookings are in person at Pearson VUE test centers; no school sponsorship or institution-arranged seat requirement is stated in the current direct-registration instructions.
- Requested Horizon
- The requested 2026-11-25 through 2027-02-28 period is subject to appointment/seat availability; no particular seat or future date was booked or guaranteed. No Practitioner retirement or examination-version expiry was announced in the current materials and applicable official news reviewed.
- Retakes
- After failed attempts: 15 days before the second, 30 days before the third, and 90 days before subsequent attempts; after passing, the same certification exam cannot be taken for 18 months (545 days).
Palo Alto Networks Cybersecurity Practitioner
- Provider
- Pearson VUE
- Format
- English, computer-scored multiple-choice certification examination; new appointments at in-person Pearson VUE test centers.
- Time limit
- 90 minutes; the published 30-minute ESL extension applies by default in non-English-speaking testing countries.
- Passing score
- 860 on the 300–1000 scaled-score scale; results remain provisional pending official review/data forensics.
- Exam fee
- US$150; prices may vary by country and additional taxes or fees may apply.
Examination outline
Cybersecurity (19%)
- Identify the components of the authentication, authorization, and accounting (AAA) framework
- Categorize techniques used by malicious actors as defined by the MITRE ATT&CK framework
- Explain the concept of Zero Trust and define its key principles
- Identify and describe the characteristics of an advanced persistent threat (APT)
- Explain the function of common security technologies
Network Security (19%)
- Describe key characteristics of Zero Trust Network Access (ZTNA)
- Explain the function of stateless firewalls and next-generation firewalls (NGFWs)
- Explain the purpose of microsegmentation
- Explain the purpose and function of common network security technologies
- Explain the limitations of signature-based network protection
- Identify and describe the deployment options for NGFWs for networks operation on both bare metal and virtualized architectures
- Identify and describe cybersecurity concerns unique to Operation Technology (OT) and internet of things (IoT) devices
- Identify and describe Palo Alto Networks Cloud-Delivered Security Services (CDSS)
- Explain the security function of Precision AI
Secure Access (14%)
- Define and explain Secure Access Service Edge (SASE) and differentiate from Secure Service Edge (SSE)
- Identify challenges related to confidentiality, integrity, and availability of information and applications
- Explain the security function of common technologies
- Describe the purpose of Software-Defined Wide Area Networking (SD-WAN) solutions
- Describe Prisma SASE solutions
Cloud Security (20%)
- Identify and describe major cloud architectures and topologies
- Identify and describe major challenges related to cloud security
- Identify and describe technologies used to secure cloud environments (e.g. CSPM, CWPP)
- Identify and describe the functions of a Cloud Native Application Protection Platform (CNAPP)
- Explain the features and functionality of Cortex Cloud
Endpoint Security (15%)
- Identify and explain Indicators of Compromise (IOCs)
- Explain the limitations of signature-based anti-malware software
- Explain the concept of User and Entity Behavior Analytics (UEBA)
- Explain endpoint detection and response (EDR) and extended detection and response (XDR)
- Explain Behavioral Threat Prevention
- Identify and describe cybersecurity threats mitigated by the following endpoint security technologies
- Explain the features and functionality of Cortex XDR
Security Operations (13%)
- Identify and describe key characteristics of threat hunting
- Explain the process and outcomes of incident response
- Explain the functions of a security information and event management (SIEM) platform
- Explain the functions of security orchestration, automation, and response (SOAR)
- Explain the function of an Attack Surface Management (ASM) platform
- Explain the features and functionality of Cortex solutions
- Identify and describe the services provided by Unit 42
Examination sources
- Cybersecurity Practitioner Datasheet
p. 5, Recommended Preparation, controlling scope statement
- Cybersecurity Practitioner certification page
Recommended Training; Download datasheet link to practitioner-datasheet.pdf
- Cybersecurity Practitioner Datasheet
p. 2, Blueprint
- Cybersecurity Practitioner Datasheet
p. 3, Blueprint, domain 1 header and tasks 1.1–1.5.3
- Cybersecurity Practitioner Datasheet
p. 3, Blueprint, domain 2 header and tasks 2.1–2.9
- Cybersecurity Practitioner Datasheet
pp. 3–4, Blueprint, domain 3 header and tasks 3.1–3.5.6
- Cybersecurity Practitioner Datasheet
p. 4, Blueprint, domain 4 header and tasks 4.1–4.5
- Cybersecurity Practitioner Datasheet
p. 4, Blueprint, domain 5 header and tasks 5.1–5.7
- Cybersecurity Practitioner Datasheet
p. 5, Blueprint, domain 6 header and tasks 6.1–6.7
- Palo Alto Networks Certification Handbook
p. 5, Exam Scoring and Official Score Report
- Palo Alto Networks Certification Handbook
p. 5, What Is a Scaled Score?
- Palo Alto Networks Certification Handbook
p. 4, Pretest Questions
- Palo Alto Networks Certification Handbook
p. 5, Exam Scoring and Official Score Report, provisional results paragraph
- Palo Alto Networks Certification Handbook
p. 3, How to Schedule Your Exam with Pearson
- Important Update: Enhancing the Value of Your Palo Alto Networks’ Certification
Main announcement, examination delivery change and transition exception
- Palo Alto Networks Certification Handbook
p. 3, Pearson Minor Requirements
- Palo Alto Networks Certification Handbook
p. 3, legal name and business email instructions
- Cybersecurity Practitioner Datasheet
p. 5, English as a Second Language (ESL) Accommodation