All tracks
Palo Alto Networks/Exam Palo Alto Networks Certified Network Security Architect (written, proctored exam) · prepared with 8-hour PAN-OS architecture capstonesFirewallsDesign

Palo Alto Network Security Architect

Config Expert track. The Network Security Architect exam is a written, proctored exam; these capstones train the design judgement it tests by making you build and prove each decision on PAN-OS. Check the official Palo Alto Networks exam page for the current blueprint.

modules
12 modules
labs
57 labs
hours of study
100 hours of study
How the exam is weightedTap a domain to open it
New to a topic used here? Learn it first

The labs assume these basics. If they are new to you, finish the linked module first and come back.

  • NGFW Engineer level PAN-OS skills (the old PCNSE level)
    The capstones assume you can already build zones, rules, NAT, HA, IPsec and Panorama pushes from the CLI; this track is about choosing and proving designs.

15 minutes free with a free account, no card needed

Sit inside a real Palo Alto Architect lab before you enroll

Pick a mock lab. You get the whole topology on one screen, a console on every device and the live task checker, exactly as enrolled students do. The clock starts when the lab opens.

Live Master Programs

You can buy these labs with our live batches also

Prefer learning live with a mentor? Chat with our team on WhatsApp for career guidance.

Curriculum

Every module and chapter

The first module is free to read. Labs need a free account. The rest unlocks when you enroll.

Full-length exam simulation

Sit a 8-hour Palo Alto Architect mock lab

One PAN-OS estate: design decisions you justify, then built and proven on the firewalls: zone and Zero Trust design, App-ID and User-ID policy, NAT, decryption, HA, IPsec and routing, with planted faults. Four variations with different customers, addressing and faults, a Practice mode with hints and Ask AI, and a scorecard by exam objective.

Open the mock labs

Palo Alto Network Security Architect track exam

Finish the track, pass this exam, and earn a certificate anyone can verify.

Log in to take the track exam

Your lab progress, attempts and certificate are saved to your account.

Read this before you start

  • Pass mark 80%. Score it or better and your certificate and badge are issued the moment you submit.
  • One more chance. If you do not pass, you can retake it straight away. That is 2 attempts in total.
  • 15-day cooldown. If the second attempt also falls short, the exam closes for 15 days. Then you get 2 fresh attempts.
  • 1 minute per question plus lab time. The timer never pauses.
  • It runs in fullscreen. Switching tabs or leaving fullscreen is a warning; on warning 3 the exam stops and is scored as it stands, and a stopped exam cannot earn the certificate.
  • Every attempt counts from the moment it starts, so close other tabs first.

Each live lab is worth 5 points of the total score.

Unlock this track

Pick how you want to learn

This track is part of Config Pro.

Most popular

Config Pro

from$72/ month

3 months$214
6 months$334

Term saving: $94 (22%) vs buying 3 months again and again

1 year$667

Term saving: $187 (22%) vs buying 3 months again and again

Savings are against renewing the 3-month plan. No auto-renewal.

  • Everything in Essential
  • Every Pro track, including this one
  • Ticket Labs: 100 days as a network engineer
  • Pro devices: Arista, Check Point, F5, Versa and more
Go Pro

Most complete

Config Expert

from$100/ month

6 months$600
1 year$1,000

Term saving: $200 (17%) vs buying 3 months again and again

Savings are against renewing the 3-month plan. No auto-renewal.

  • Everything in Config Pro
  • Every Expert track, on top of all of Pro
  • Full 8-hour mock labs with scorecards
Get Config Expert

6-month and 1-year plans lower the monthly cost. See all pricing

Join the community