Palo Alto Networks Certified Cybersecurity Practitioner Preparation Details
The Palo Alto Networks Certified Cybersecurity Practitioner exam validates knowledge of cybersecurity, network security, secure access, cloud, endpoint, security operations and identity security concepts. This guide lists every blueprint objective with official Palo Alto Networks documentation, so you can study each topic directly. You can also explore more Palo Alto Networks certification study guides on the Palo Alto Networks Certification Study Guides to keep building your skills.
Palo Alto Networks Certified Cybersecurity Practitioner Materials
| Coursera | Palo Alto Networks Cybersecurity Fundamentals |
| Udemy | Palo Alto Networks Cybersecurity Practitioner Prep |
1. Cybersecurity 20%
1.1 Identify the components of the authentication, authorization, and accounting (AAA) framework
What Is Identity and Access Management (IAM)?
What Is Authentication and Authorization?
What Is Multifactor Authentication?
1.2 Explain the techniques used by malicious actors as defined by the MITRE ATT&CK framework
What Is MITRE ATT&CK Framework?
How to Break the Cyber Attack Lifecycle
1.3 Identify and describe the characteristics of an advanced persistent threat (APT)
What Is an Advanced Persistent Threat?
What is a Command and Control Attack?
1.4 Explain the function of common security technologies (e.g., Identity Provider [IdP], identity and access management [IAM], multi-factor authentication [MFA], mobile device management [MDM], mobile application management [MAM], secure email gateway, integrated cloud email security)
What Is Identity and Access Management (IAM)?
What Is Multifactor Authentication?
What Is a Secure Web Gateway (SWG)?
2. Network Security 14%
2.1 Identify and describe key characteristics of Zero Trust Network Access (ZTNA)
What Is Zero Trust Network Access (ZTNA)
What is Zero Trust Network Security?
2.2 Explain the functions of common network security technologies (e.g., intrusion prevention system [IPS], URL filtering, DNS Security, VPN, SSL/TLS decryption)
What is an Intrusion Prevention System?
What Is DNS Tunneling? [+ Examples & Protection Tips]
What Is a VPN? A Complete Guide to Virtual Private Networks
2.3 Explain the limitations of signature-based network protection
What Is Threat Prevention? [Definition, Explanation, + How-tos]
What is an Intrusion Prevention System?
2.4 Identify and describe the components of Palo Alto Networks Cloud-Delivered Security Services (CDSS)
Cloud-Delivered Security Services
Advanced Threat Prevention Powered by Precision AI®
Advanced WildFire Powered by Precision AI™
Advanced DNS Security Powered by Precision AI®
2.5 Explain the security function of Precision AI
Advanced Threat Prevention Powered by Precision AI®
Advanced WildFire Powered by Precision AI™
Advanced DNS Security Powered by Precision AI®
3. Secure Access 13%
3.1 Differentiate Secure Access Service Edge (SASE) from Secure Service Edge (SSE)
SASE vs. SSE: What Is the Difference?
What Is SASE (Secure Access Service Edge)?
3.2 Explain the security function of common technologies (e.g., Secure Web Gateway, Enterprise Browser, data loss prevention [DLP], Cloud Access Security Broker [CASB], Remote Browser Isolation)
What Is a Secure Web Gateway (SWG)?
What Is a Secure Enterprise Browser?
What Is DLP (Data Loss Prevention)? An Overview
Secure Web Gateway vs. CASB: What Is the Difference?
What Is Remote Browser Isolation (RBI)?
3.3 Explain the functions of Prisma SASE solutions (e.g., Prisma Access, Prisma SD-WAN, Prisma Browser, Enterprise DLP, AI Access, Prisma AIRS)
4. Cloud Security 20%
4.1 Identify and describe major cloud architectures and topologies
Cloud Security Glossary & FAQs
Cloud Security Threats: Detection and Challenges
4.2 Identify and describe major challenges related to cloud security (e.g., Application Security, Cloud Posture Security, Cloud Runtime Security)
Cloud Security Threats: Detection and Challenges
How ASPM Strengthens Your Cloud Ecosystem
What Is a Cloud Workload Protection Platform (CWPP)?
4.3 Identify and describe technologies used to secure cloud environments (e.g. CSPM, CWPP)
What Is a Cloud Workload Protection Platform (CWPP)?
How ASPM Strengthens Your Cloud Ecosystem
4.4 Identify and describe the functions of a Cloud Native Application Protection Platform (CNAPP)
What is a Cloud Native Security Platform (CNSP)?
What Is the Difference Between CNAPP Vs. CASB?
4.5 Explain the features and functionality of Cortex Cloud
5. Endpoint Security 13%
5.1 Explain the limitations of signature-based anti-malware software
What Is Endpoint Security Antivirus?
5.2 Explain the concept of User and Entity Behavior Analytics (UEBA)
What Is Threat Prevention? [Definition, Explanation, + How-tos]
5.3 Explain functions of endpoint detection and response (EDR) and extended detection and response (XDR)
What Is Endpoint Detection and Response (EDR)?
5.4 Explain the concept of Behavioral Threat Prevention
What Is Threat Prevention? [Definition, Explanation, + How-tos]
5.5 Explain how cybersecurity threats are mitigated by various endpoint security technologies (e.g., host-based firewall and Host-Based Intrusion Prevention Systems [HIPS], device control and USB control, application control, disk encryption, patch management)
What are the Types of Endpoint Security?
What Is Patch Management? Process, Policy, and Cybersecurity Benefits
Firewall vs. Antivirus: Breaking Down the Differences
6. Security Operations 10%
6.1 Identify and describe key characteristics of threat hunting and incident response
6.2 Explain the functions of a security information and event management (SIEM) platform, security orchestration, automation, and response (SOAR), and Attack Surface Management (ASM)
What Is Security Information and Event Management (SIEM)?
What Is Attack Surface and Attack Surface Management?
6.3 Explain the features and functionality of Cortex XSOAR and Cortex XSIAM
What Is Extended Security Intelligence and Automation Management (XSIAM)?
Navigate the Cortex XSOAR 8 SaaS docs
Navigate the Cortex XSIAM docs
6.4 Identify and describe the services provided by Unit 42
Unit 42 Cyber Threat Intelligence & Incident Response
About Unit 42: Our Mission and Team
7. Identity Security 10%
7.1 Identify and describe the core concepts of Privileged Access Management (PAM) (e.g., distinction between human identity and machine identity accounts, risk associated with unmonitored accounts)
What Is Privileged Access Management (PAM)?
7.2 Identify and describe the core architecture of Privileged Access Management (PAM) (e.g., credential vaulting and secrets management, session management and recording, cloud and infrastructure privileged access control)
What Is Privileged Access Management (PAM)?
What Is Just-in-Time (JIT) Access?
What Is Zero Standing Privileges (ZSP)?
7.3 Explain the purpose of Identity Threat Detection and Response (ITDR) (e.g., credential theft detection, identity infrastructure/provider protection, threat vector remediation, automated identity containment)
What Is ITDR (Identity Threat Detection and Response)?
What Is a Credential-Based Attack?
7.4 Explain the importance of provisioning and deprovisioning in identity lifecycle management
What Is Identity Lifecycle Management?
What Is Identity Governance and Administration (IGA)?
7.5 Explain the function of role-based access control (RBAC) and identity governance and administration (IGA) in identity security
What Is Identity and Access Management (IAM)?
What Is Identity Governance and Administration (IGA)?
What Is Authentication and Authorization?
7.6 Identify and describe features and functionality of the Palo Alto Networks Idira identity security platform
Idira Machine Identity Security
Wrapping Up Palo Alto Networks Certified Cybersecurity Practitioner
This Palo Alto Networks Certified Cybersecurity Practitioner study guide covered all seven blueprint domains with official documentation for each objective. Work through the links in order, revisit the weaker domains, and you will be ready for exam day. You can also explore more Palo Alto Networks certification study guides on the Palo Alto Networks Certification Study Guides to keep building your skills. Have a question or tip? Leave a comment below.
Receive Updates on Palo Alto Networks Certified Cybersecurity Practitioner Exam
Want to be notified as soon as I post? Subscribe to the RSS feed / leave your email address in the subscribe section. Share the article to your social networks with the below links so it can benefit others.
