A great way to start the Palo Alto Networks Certified Network Security Professional (NetSec-Pro) preparation is to begin by properly appreciating the role that syllabus and study guide play in the Palo Alto NetSec-Pro certification exam. This study guide is an instrument to get you on the same page with Palo Alto and understand the nature of the Palo Alto NetSec-Pro exam.
Our team of experts has composed this Palo Alto NetSec-Pro exam preparation guide to provide the overview about Palo Alto Network Security Professional exam, study material, sample questions, practice exam and ways to interpret the exam objectives to help you assess your readiness for the Palo Alto NetSec-Pro exam by identifying prerequisite areas of knowledge. We recommend you to refer the simulation questions and practice test listed in this guide to determine what type of questions will be asked and the level of difficulty that could be tested in the Palo Alto NetSec-Pro certification exam.
Palo Alto NetSec-Pro Exam Overview:
| Exam Name | Palo Alto Network Security Professional |
| Exam Number | NetSec-Pro |
| Exam Price | $200 USD |
| Duration | 90 minutes |
| Number of Questions | 75 |
| Passing Score | 860 on a scale of 300 to 1000 |
| Exam Registration | PEARSON VUE |
| Sample Questions | Palo Alto NetSec-Pro Sample Questions |
| Practice Exam | Palo Alto Networks Certified Network Security Professional Practice Test |
Palo Alto NetSec-Pro Exam Topics:
| Section | Weight | Objectives |
|---|---|---|
| Network Security Fundamentals | 17% |
- Explain Application Layer inspection for Strata and SASE products - Explain the functionality of slow path and fast path for packet inspection - Explain the use of decryption on Strata and SASE products (e.g., SSL Forward Proxy, SSL Inbound Inspection, SSH Proxy, no decrypt) - Explain the application of network hardening methods for enhanced security on Strata and SASE products (e.g., Content-ID, Zero Trust, User-ID, Device-ID, Zones) |
| NGFW and SASE Solution Functionality | 13% |
- Explain the function of Cloud NGFWs, PA-Series, CN-Series, and VM-Series firewalls (e.g., perimeter and core security, zone security and segmentation, high availability [HA], security and NAT policy implementation, monitoring and logging) - Explain the function of Prisma SD-WAN (e.g., WAN optimization, path and NAT policies, Zone-based firewalls, monitoring and logging) - Explain the function of Prisma Access (e.g., remote user configuration, remote network configuration, public and private application access, security and NAT policy implementation, monitoring and logging) - Explain the functionality of Panorama and Strata Cloud Manager (SCM) for managing Strata and SASE solutions |
| Platform Solutions, Services, and Tools | 30% |
- Explain the security efficacy of Palo Alto Networks NGFW and Prisma SASE products (e.g., security and NAT policy, User-ID, App-ID, decryption, monitoring and logging) - Explain the functionality of Cloud-Delivered Security Services (CDSS) components
- Explain the alignment of AIOps to Palo Alto Networks best practices (e.g., dashboards, Best Practice Assessment [BPA], administration) |
| NGFW and SASE Solution Maintenance and Configuration | 10% |
- Explain the configuration and maintenance of Palo Alto Networks hardware firewalls, VM-Series firewalls, CN-Series firewalls, and Cloud NGFWs (e.g., Security policies, profiles, updates, upgrades) - Explain the configuration and maintenance of Prisma Access (e.g., Security policies, profiles, updates, upgrades, monitoring and logging) |
| Infrastructure Management and CDSS | 17% |
- Explain the function of Security policies, profiles, and updates in the configuration and maintenance of CDSS - Explain the function of Security policies, Device-IDs, and monitoring and logging in the configuration and maintenance of IoT security - Explain the function of data encryption, access control, and monitoring and logging in the configuration and maintenance of Enterprise DLP and Enterprise SaaS Security - Explain the function of supported products, new device addition, reporting, and configuration management in SCM and Panorama in network security environments |
| Connectivity and Security | 13% |
- Explain the configuration and maintenance of network security for on-premises, cloud, and hybrid networks (e.g., network segmentation, policies, monitoring and logging, certificates) - Identify and describe the components used to maintain connectivity and security of remote users (e.g., remote access solutions, network segmentation, Security policy tuning, monitoring and logging, certificates) |
Palo Alto NetSec-Pro Exam Description:
The Palo Alto Networks Certified Network Security Professional certification is designed to validate a candidate’s understanding of all products and services included in the Palo Alto Networks network security solution, their use cases, and how they are applicable to an organization. The Network Security Professional exam also validates a candidate’s ability to use, maintain, and configure network security products at an entry level, and to perform basic network security product installation and deployment.
