Palo Alto Networks Certified Network Security Engineer
The PCNSE is Palo Alto Networks' professional-level exam. It goes beyond administration into design and lifecycle: HA and deployment planning, advanced App-ID and decryption, GlobalProtect and site-to-site VPN, Panorama at scale, User-ID and authentication, and structured troubleshooting of PAN-OS.
Ready to sit the mock exam?
The timer starts as soon as you begin. You can flag questions, move freely between them, and review everything before submitting. No sign-in required — sign in afterwards to save the result to your history.
Start PCNSE examSkills measured
Core Concepts
22%Firewall architecture, interface and zone types, virtual systems, HA modes, and licensing.
Deploy and Configure Core Components
25%Security, NAT and decryption policy, security profiles, App-ID, and authentication policy.
Deploy and Configure Features and Subscriptions
20%GlobalProtect, site-to-site VPN, User-ID, WildFire, and Advanced Threat Prevention and URL Filtering.
Manage and Operate
18%Panorama templates and device groups, software and content updates, logging, and configuration management.
Troubleshooting
15%Session and flow analysis, packet capture, decryption and VPN issues, and CLI troubleshooting tools.