1. Home
  2. Palo Alto Networks
  3. NetSec-Pro Exam Syllabus

Palo Alto Networks NetSec-Pro Exam Syllabus

Start Free NetSec-Pro Exam Practice After Reviewing the Topics

Before starting your NetSec-Pro exam preparation, it is recommended to review the complete Palo Alto Networks Certified Network Security Professional exam syllabus and carefully go through the exam objectives listed below. Once you understand the exam structure and objectives, you should practice using our free NetSec-Pro questions. We also provide premium NetSec-Pro practice test, fully updated according to the latest exam objectives, to help you accurately assess your preparedness for the actual exam.

Palo Alto Networks NetSec-Pro Exam Objectives

Section Weight Objectives
Network Security Fundamentals 16% 1.1 Explain Application Layer inspection for Strata and SASE products
1.2 Differentiate between slow path and fast path for packet inspection
1.3 Explain the use of decryption on Strata and SASE products
1.3.1 SSL Forward Proxy
1.3.2 SSL Inbound Inspection
1.3.3 SSH Proxy
1.3.4 No decrypt
1.4 Apply network hardening methods for enhanced security on Strata and SASE products
1.4.1 Content-ID
1.4.2 Zero Trust
1.4.3 User-ID (including Cloud Identity Engine) and Device-ID
1.4.4 Zones
NGFW and SASE Solution Functionality 18% 2.1 Explain the function of Cloud NGFWs, PA-Series, CN-Series, and VM-Series firewalls
2.1.1 Perimeter and core security
2.1.2 Zone security and segmentation
2.1.3 High availability (HA)
2.1.4 Security and NAT policy implementation
2.1.5 Monitoring and logging
2.2 Explain the function of Prisma SD-WAN
2.2.1 WAN optimization
2.2.2 Path and NAT policies
2.2.3 Zone-based firewall
2.2.4 Monitoring and logging

2.3 Explain the function of Prisma Access
2.3.1 Remote user configuration
2.3.2 Remote network configuration
2.3.3 Public and private application access
2.3.4 Security and NAT policy implementation
2.3.5 Monitoring and logging (Strata Logging Service)
2.4 Identify options for managing Strata and SASE solutions
2.4.1 Panorama
2.4.2 Strata Cloud Manager (SCM)
Platform Solutions, Services, and Tools 18% 3.1 Describe Palo Alto Networks NGFW and Prisma SASE products for security efficacy
3.1.1 Security and NAT policy creation
3.1.2 Cloud-Delivered Security Services (CDSS) configuration (security profiles)
3.1.3 User-ID and App-ID configuration
3.1.4 Decryption
3.1.5 Monitoring and logging
3.2 Explain the application of CDSS
3.2.1 Internet of things (IoT) security
3.2.2 Enterprise Data Loss Prevention (DLP)
3.2.3 SaaS Security
3.2.4 PAN-OS SD-WAN
3.2.5 Premium GlobalProtect
3.2.6 Advanced WildFire
3.2.7 Advanced Threat Prevention
3.2.8 Advanced URL Filtering
3.2.9 Advanced DNS
3.3 Explain aligning AIOps to Palo Alto Networks best practices
3.3.1 Administration of AIOps
3.3.2 Dashboards
3.3.3 Best Practice Assessment (BPA)
NGFW and SASE Solution Maintenance and Configuration 19% 4.1 Maintain and configure Palo Alto Networks hardware firewalls, VM-Series firewalls, CN-Series
firewalls, and Cloud NGFWs
4.1.1 Security policies
4.1.2 Profiles
4.1.3 Updates
4.1.4 Upgrades

4.2 Add, configure, and maintain Prisma SD-WAN
4.2.1 Initial ION setup
4.2.2 Pathing
4.2.3 Monitoring and logging
4.3 Maintain and configure Prisma Access
4.3.1 Security policies
4.3.2 Profiles
4.3.3 Updates
4.3.4 Upgrades
4.3.5 Monitoring and logging
Infrastructure Management and CDSS 15% 5.1 Maintain and configure CDSS
5.1.1 Security policies
5.1.2 Profiles
5.1.3 Updates
5.2 Maintain and configure IoT security
5.2.1 Security policies
5.2.2 Device-IDs
5.2.3 Monitoring and logging
5.3 Maintain and configure Enterprise DLP and Enterprise SaaS Security
5.3.1 Data encryption
5.3.2 Access control
5.3.3 Monitoring and logging
5.4 Maintain and configure Strata Cloud Manager (SCM) and Panorama in network security
environments
5.4.1 Supported products
5.4.2 New device addition
5.4.3 Reporting
Connectivity and Security 14% 6.1 Maintain and configure network security of on-premises, cloud, and hybrid networks
6.1.1 Network segmentation
6.1.2 Policies (security and network)
6.1.3 Monitoring and logging
6.1.4 Certificates

6.2 Maintain connectivity and security of remote users
6.2.1 Remote access solutions
6.2.2 Network segmentation
6.2.3 Security policy tuning
6.2.4 Monitoring and logging
6.2.5 Certificates
Official Information https://www.paloaltonetworks.com/services/education/palo-alto-networks-netsec-professional