1. Home
  2. Palo Alto Networks
  3. Cybersecurity-Apprentice Exam Syllabus

Palo Alto Networks Cybersecurity-Apprentice Exam Syllabus

Start Free Cybersecurity-Apprentice Exam Practice After Reviewing the Topics

Before starting your Cybersecurity-Apprentice exam preparation, it is recommended to review the complete Palo Alto Networks Certified Cybersecurity Apprentice exam syllabus and carefully go through the exam objectives listed below. Once you understand the exam structure and objectives, you should practice using our free Cybersecurity-Apprentice questions. We also provide premium Cybersecurity-Apprentice practice test, fully updated according to the latest exam objectives, to help you accurately assess your preparedness for the actual exam.

Palo Alto Networks
Vendor
Cybersecurity-Apprentice
Exam Code
115
Total Questions
7
Total Exam Domains

START FREE Cybersecurity-Apprentice EXAM PRACTICE

NO SIGNUP REQUIRED  •  100% FREE TO START

Cybersecurity-Apprentice EXAM QUESTIONS

Palo Alto Networks Cybersecurity-Apprentice Exam Objectives

Section 1: Cybersecurity
Weight:
16%
  • 1.1 Identify and describe vulnerabilities and exploits
  • 1.2 Identify and describe the stages of the cyber attack lifecycle
  • 1.3 Identify and describe common attack types (e.g., malware, insider threat, command and control [C2], social engineering, AI-powered)
  • 1.4 Identify and describe common threat detection systems (e.g., Intrusion Detection System [IDS], Host-Based Intrusion Detection System [HIDS], Network-Based Detection System [NIDS])
  • 1.5 Identify and describe threat prevention systems and practices (e.g., end user awareness, security updates, antivirus, intrusion prevention systems, firewalls)
  • 1.6 Explain the concept of Zero Trust
Section 2: Network Fundamentals
Weight:
16%
  • 2.1 Identify and describe types of area networks (e.g., WAN, LAN, SD-WAN)
  • 2.2 Explain external (north-south) and internal (east-west) traffic flow patterns for environments
  • 2.3 Explain the function of a default gateway
  • 2.4 Explain the function of NAT, DNS, and DHCP
  • 2.5 Explain routed protocols and routing protocols
  • 2.6 Explain the TCP/IP model and the OSI model
  • 2.7 Identify and describe devices that operate in Layer 1 through Layer 4 of the OSI model
Section 3: Network Security
Weight:
14%
  • 3.1 Identify and describe network segmentation methods (e.g., IP subnetting, VLAN, zone)
  • 3.2 Explain the function of stateful firewalls and next-generation firewalls (NGFWs)
  • 3.3 Explain the function of URL filtering, VPNs, and proxies
  • 3.4 Identify and describe tunneling protocols (e.g., SSH, TLS, IKE)
  • 3.5 Explain the function of data loss prevention (DLP)
  • 3.6 Explain the function of enterprise browsers
Section 4: Endpoint Security
Weight:
10%
  • 4.1 Identify and describe internet of things (IoT) devices and endpoints
  • 4.2 Explain the objectives of endpoint security
  • 4.3 Identify and describe endpoint security components (e.g., security updates, antivirus, host-based firewalls)
Section 5: Cloud Security
Weight:
13%
  • 5.1 Identify and describe the four cloud-computing deployment models
  • 5.2 Identify and describe common cloud service models (e.g., Software as a Service [SaaS], Platform as a Service [PaaS], Infrastructure as a Service [IaaS], Network as a Service [NaaS])
  • 5.3 Explain the cloud shared responsibility model
  • 5.4 Define common cloud terms (e.g., hosted, virtualization, virtual machine, container, microservice, API)
  • 5.5 Explain the cloud native security platform (CNSP)
  • 5.6 Explain the function of continuous integration and continuous delivery / deployment (CI/CD)
Section 6: Security Operations
Weight:
13%
  • 6.1 Explain security operations functions (e.g., Identify / Detect, Investigate, Mitigate, Improve)
  • 6.2 Identify methods to optimize security operations center (SOC) performance (e.g., automation and AI, collaboration and information sharing, regular Security policy updates, security framework alignment)
  • 6.3 Define common security operations terms (e.g., event, alert, SOC, DevSecOps, incident response plan, disaster recovery plan)
  • 6.4 Explain the concepts of false positive alerts and false negative alerts
  • 6.5 Explain the function of syslog
  • 6.6 Explain security orchestration, automation, and response (SOAR) and security information and event management (SIEM)
  • 6.7 Explain AI as it relates to alert analysis
Section 7: Identity Security
Weight:
18%
7.1 Identify and describe identity and access management (IAM) components
  • 7.1.1 Identity lifecycle management
  • 7.1.2 Single-factor and multifactor authentication
  • 7.1.3 Single sign-on (SSO) and federation
  • 7.1.4 Directory services
  • 7.1.5 Role-Based Access Control (RBAC)
7.2 Identify and describe privileged access management (PAM) components
  • 7.2.1 Credential vaulting and rotation
  • 7.2.2 Session monitoring, isolation, and recording
  • 7.2.3 Least privilege
  • 7.2.4 Just-in-time (JIT) access
7.3 Identify and describe public key infrastructure (PKI) components
  • 7.3.1 Certificate authorities (CAs) and trust chains
  • 7.3.2 Public / private key pairs in encryption and digital signatures
7.4 Identify and describe the components of secrets management
  • 7.4.1 Application secrets (e.g., API keys, SSH keys, passwords, tokens)
  • 7.4.2 CI/CD pipelines
Info
https://www.paloaltonetworks.com/services/education/panw-cybersecurity-apprentice