Palo Alto Networks Certified Network Security Administrator
The PCNSA validates the knowledge to operate Palo Alto Networks next-generation firewalls: the single-pass architecture, Security and NAT policy, App-ID, Content-ID and User-ID, decryption and URL filtering, and monitoring and reporting with the ACC and logs.
Ready to sit the mock exam?
The timer starts as soon as you begin. You can flag questions, move freely between them, and review everything before submitting. No sign-in required — sign in afterwards to save the result to your history.
Start PCNSA examSkills measured
Platform and Architecture
20%Single-pass parallel processing, zones and interfaces, virtual routers, and management and deployment models.
Security and NAT Policies
25%Policy match criteria and evaluation order, security profiles and groups, and source and destination NAT.
App-ID, Content-ID and User-ID
25%Application identification and dependencies, threat prevention, WildFire, and mapping users to policy.
Decryption and URL Filtering
15%SSL forward proxy and inbound inspection, decryption policy, and URL filtering categories and actions.
Monitoring and Reporting
15%The Application Command Center, traffic and threat logs, custom reports, and log forwarding.