Palo Alto Networks Certified Cybersecurity Apprentice

Questions 1–5 6–10 11–15 16–19

1.2 Identify and describe the stages of the cyber attack lifecycle

19 questions · 4 pages

1.4 Identify and describe common threat detection systems (e.g., Intrusion Detection System [IDS], Host-Based Intrusion Detection System [HIDS], Network-Based Detection System [NIDS])

18 questions · 4 pages

Questions 1–5 6–10 11–15 16–18

1.5 Identify and describe threat prevention systems and practices (e.g., end user awareness, security updates, antivirus, intrusion prevention systems, firewalls)

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

1.6 Explain the concept of Zero Trust

21 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–21

2.1 Identify and describe types of area networks (e.g., WAN, LAN, SD-WAN)

21 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–21

2.2 Explain external (north-south) and internal (east-west) traffic flow patterns for environments

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

2.3 Explain the function of a default gateway

23 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–23

2.4 Explain the function of NAT, DNS, and DHCP

23 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–23

2.5 Explain routed protocols and routing protocols

23 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–23

2.6 Explain the TCP/IP model and the OSI model

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

2.7 Identify and describe devices that operate in Layer 1 through Layer 4 of the OSI model

20 questions · 4 pages

3.1 Identify and describe network segmentation methods (e.g., IP subnetting, VLAN, zone)

20 questions · 4 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–32

3.2 Explain the function of stateful firewalls and next-generation firewalls (NGFWs)

32 questions · 7 pages

3.3 Explain the function of URL filtering, VPNs, and proxies

16 questions · 4 pages

Questions 1–5 6–10 11–15 16–16

3.4 Identify and describe tunneling protocols (e.g., SSH, TLS, IKE)

20 questions · 4 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

3.5 Explain the function of data loss prevention (DLP)

27 questions · 6 pages

3.6 Explain the function of enterprise browsers

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

4.1 Identify and describe internet of things (IoT) devices and endpoints

28 questions · 6 pages

4.2 Explain the objectives of endpoint security

20 questions · 4 pages

Questions 1–5 6–10 11–15 16–19

4.3 Identify and describe endpoint security components (e.g., security updates, antivirus, host-based firewalls)

19 questions · 4 pages

5.1 Identify and describe the four cloud-computing deployment models

11 questions · 3 pages

Questions 1–5 6–10 11–11

5.2 Identify and describe common cloud service models (e.g., Software as a Service [SaaS], Platform as a Service [PaaS], Infrastructure as a Service [IaaS], Network as a Service [NaaS])

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–16

5.3 Explain the cloud shared responsibility model

16 questions · 4 pages

5.4 Define common cloud terms (e.g., hosted, virtualization, virtual machine, container, microservice, API)

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

5.5 Explain the cloud native security platform (CNSP)

28 questions · 6 pages

5.6 Explain the function of continuous integration and continuous delivery / deployment (CI/CD)

25 questions · 5 pages

6.1 Explain security operations functions (e.g., Identify / Detect, Investigate, Mitigate, Improve)

25 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

6.3 Define common security operations terms (e.g., event, alert, SOC, DevSecOps, incident response plan, disaster recovery plan)

15 questions · 3 pages

Questions 1–5 6–10 11–15

6.4 Explain the concepts of false positive alerts and false negative alerts

30 questions · 6 pages

6.5 Explain the function of syslog

21 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–21

6.6 Explain security orchestration, automation, and response (SOAR) and security information and event management (SIEM)

30 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30

6.7 Explain AI as it relates to alert analysis

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

7.1 Identify and describe identity and access management (IAM) components

28 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–28

7.2 Identify and describe privileged access management (PAM) components

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

7.3 Identify and describe public key infrastructure (PKI) components

24 questions · 5 pages

7.4 Identify and describe the components of secrets management

24 questions · 5 pages