Examers.io
ExamsOrganizationsHow it worksPricingHelp & FAQ
Sign inStart free
PALO ALTO NETWORKS

Palo Alto Networks Certified Network Security Analyst

NETWORK-SECURITY-ANALYST

The Palo Alto Networks Certified Network Security Analyst certification validates the skills required to configure firewalls and subscriptions, create policies, and manage network security centrally using Strata Cloud Manager. It is designed for analysts and administrators who operate in network security environments. Earning this credential demonstrates your ability to manage and operate Palo Alto Networks network security solutions effectively.

Practice Free Questions

430 practice questions · Updated 2026-07-30

4Domains
21Objectives
132Concepts
430Questions

NETWORK-SECURITY-ANALYST Curriculum

Every domain, objective, and concept the NETWORK-SECURITY-ANALYST exam measures.

1.1 Create and apply security profiles and security profile groups

7 concepts · 23 questions
  1. Security Profiles Overview
  2. Creating Security Profiles
  3. Configuring Security Profile Settings
  4. Security Profile Groups
  5. Applying Security Profiles and Groups
  6. Managing and Modifying Security Profiles
  7. Best Practices for Security Profiles

1.2 Create and apply decryption profiles

8 concepts · 21 questions
  1. Decryption Profile Fundamentals
  2. Creating Decryption Profiles
  3. Configuring SSL/TLS Protocol Settings
  4. Configuring Decryption Exclusions
  5. Configuring Decryption Failure Handling
  6. Configuring Decryption Logging
  7. Applying Decryption Profiles to Decryption Policies
  8. Verifying Decryption Profile Functionality

1.3 Create and apply external dynamic lists

6 concepts · 20 questions
  1. External Dynamic List (EDL) Fundamentals
  2. EDL Types and Sources
  3. Creating an External Dynamic List
  4. Configuring EDL Refresh Settings
  5. Applying EDLs in Security Policies
  6. Testing and Verifying EDL Functionality

1.4 Create and apply custom objects (e.g., URL categories, signatures, data patterns)

6 concepts · 13 questions
  1. Custom URL Category Creation
  2. Custom URL Category Application
  3. Custom Signature Creation
  4. Custom Signature Application
  5. Custom Data Pattern Creation
  6. Custom Data Pattern Application

1.5 Create and apply Log Forwarding profile

6 concepts · 19 questions
  1. Log Forwarding Profile Overview
  2. Creating a Log Forwarding Profile
  3. Configuring Log Forwarding Destinations
  4. Selecting Log Types and Filters
  5. Applying Log Forwarding Profile to Security Policies
  6. Verifying Log Forwarding

1.6 Create and apply data security profiles

6 concepts · 15 questions
  1. Data Security Profile Fundamentals
  2. Data Patterns and Identifiers
  3. Creating Custom Data Patterns
  4. Configuring Data Security Profiles
  5. Applying Data Security Profiles to Security Policies
  6. Testing and Verifying Data Security Profiles

1.7 Create and apply internet of things (IoT) security profiles

5 concepts · 23 questions
  1. IoT Security Profile Fundamentals
  2. Creating IoT Security Profiles
  3. Configuring IoT Security Profile Rules
  4. Applying IoT Security Profiles to Security Policies
  5. Verifying IoT Security Profile Enforcement

1.8 Create and apply DoS protection profiles

5 concepts · 18 questions
  1. DoS Protection Profile Overview
  2. Creating DoS Protection Profiles
  3. Configuring DoS Protection Actions
  4. Applying DoS Protection Profiles
  5. Verifying DoS Protection Effectiveness

1.9 Create and apply SD-WAN profiles and templates

5 concepts · 18 questions
  1. SD-WAN Profile Types
  2. SD-WAN Template Structure
  3. Creating SD-WAN Profiles
  4. Applying SD-WAN Templates
  5. Verifying SD-WAN Configuration

2.1 Create and apply Security policies (i.e., App-ID, User-ID, Content-ID)

6 concepts · 14 questions
  1. App-ID identification
  2. User-ID integration
  3. Content-ID filtering
  4. Security policy rule creation
  5. Policy application and enforcement
  6. Policy validation and testing

2.2 Create and apply NAT policies

7 concepts · 21 questions
  1. NAT Policy Fundamentals
  2. Creating NAT Policies
  3. Applying NAT Policies
  4. NAT Policy Types
  5. NAT Policy Configuration Options
  6. NAT Policy Ordering and Precedence
  7. Troubleshooting NAT Policies

2.3 Create and apply decryption policies

5 concepts · 17 questions
  1. Decryption Policy Fundamentals
  2. Decryption Policy Configuration
  3. Decryption Profile Management
  4. Decryption Policy Ordering and Evaluation
  5. Decryption Policy Application and Verification

2.4 Create and apply application override policies

5 concepts · 19 questions
  1. Application Override Policy Fundamentals
  2. Creating Application Override Policies
  3. Configuring Application Override Attributes
  4. Applying Application Override Policies
  5. Verifying Application Override Policies

2.5 Create and apply Policy Based Forwarding (PBF) policies

4 concepts · 13 questions
  1. PBF policy fundamentals
  2. PBF policy configuration
  3. PBF path monitoring
  4. PBF policy application

2.6 Create and apply SD-WAN routing and service-level agreement (SLA) policies

4 concepts · 14 questions
  1. SD-WAN routing policy fundamentals
  2. SLA policy configuration
  3. SLA-based path selection
  4. SD-WAN policy application

3.1 Use centralized management system

12 concepts · 40 questions
  1. Strata Cloud Manager (SCM) overview
  2. SCM deployment and access
  3. SCM configuration management
  4. Folders in SCM
  5. Snippets in SCM
  6. Managing folders and snippets
  7. Automations in SCM
  8. Variables in SCM
  9. Implementing automations and variables
  10. Strata Logging Service overview
  11. Strata Logging Service configuration
  12. Using Strata Logging Service for monitoring

3.2 Use Command Center, Activity Insights, and Policy Optimizer to improve security posture

6 concepts · 28 questions
  1. Command Center Overview
  2. Using Command Center Dashboards
  3. Activity Insights Overview
  4. Analyzing Activity Insights Data
  5. Policy Optimizer Overview
  6. Using Policy Optimizer to Improve Policies

3.3 Use Log Viewer and the Incidents and Alerts page to remediate incidents and alerts

9 concepts · 29 questions
  1. Log Viewer navigation
  2. Log filtering and search
  3. Log correlation and analysis
  4. Incidents and Alerts page overview
  5. Incident triage
  6. Alert investigation
  7. Incident remediation actions
  8. Remediation verification
  9. Documentation and reporting

4.1 Troubleshoot misconfigurations across all management and on-box options

7 concepts · 21 questions
  1. Identify misconfigurations in management interfaces
  2. Identify misconfigurations in on-box options
  3. Troubleshoot management plane misconfigurations
  4. Troubleshoot dataplane misconfigurations
  5. Use CLI and GUI to verify configurations
  6. Compare intended vs actual configuration
  7. Correct misconfigurations safely

4.2 Troubleshoot runtime and commit / push errors

7 concepts · 17 questions
  1. Runtime Error Identification
  2. Commit Error Diagnosis
  3. Push Error Troubleshooting
  4. Configuration Validation
  5. Log Analysis for Errors
  6. Rollback Procedures
  7. Error Resolution Workflow

4.3 Troubleshoot device usage and health

6 concepts · 27 questions
  1. Monitor device resource usage
  2. Diagnose high resource consumption
  3. Troubleshoot device health issues
  4. Manage system logs for troubleshooting
  5. Utilize CLI and GUI tools for health monitoring
  6. Interpret device health reports
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Practice Free Questions

Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for NETWORK-SECURITY-ANALYST, so none is invented.