Palo Alto Network Security Architect
Config Expert track. The Network Security Architect exam is a written, proctored exam; these capstones train the design judgement it tests by making you build and prove each decision on PAN-OS. Check the official Palo Alto Networks exam page for the current blueprint.
- modules
- 12 modules
- labs
- 57 labs
- hours of study
- 100 hours of study
The labs assume these basics. If they are new to you, finish the linked module first and come back.
- NGFW Engineer level PAN-OS skills (the old PCNSE level)The capstones assume you can already build zones, rules, NAT, HA, IPsec and Panorama pushes from the CLI; this track is about choosing and proving designs.
15 minutes free with a free account, no card needed
Sit inside a real Palo Alto Architect lab before you enroll
Pick a mock lab. You get the whole topology on one screen, a console on every device and the live task checker, exactly as enrolled students do. The clock starts when the lab opens.
Sahyadri Insurance
Insurance
- Devices
- 18 devices
- Tasks
- 39 tasks in 11 sections
Live Master Programs
You can buy these labs with our live batches also
Prefer learning live with a mentor? Chat with our team on WhatsApp for career guidance.
Curriculum
Every module and chapter
The first module is free to read. Labs need a free account. The rest unlocks when you enroll.
Sit a 8-hour Palo Alto Architect mock lab
One PAN-OS estate: design decisions you justify, then built and proven on the firewalls: zone and Zero Trust design, App-ID and User-ID policy, NAT, decryption, HA, IPsec and routing, with planted faults. Four variations with different customers, addressing and faults, a Practice mode with hints and Ask AI, and a scorecard by exam objective.
Open the mock labsPalo Alto Network Security Architect track exam
Finish the track, pass this exam, and earn a certificate anyone can verify.
Your lab progress, attempts and certificate are saved to your account.
Read this before you start
- Pass mark 80%. Score it or better and your certificate and badge are issued the moment you submit.
- One more chance. If you do not pass, you can retake it straight away. That is 2 attempts in total.
- 15-day cooldown. If the second attempt also falls short, the exam closes for 15 days. Then you get 2 fresh attempts.
- 1 minute per question plus lab time. The timer never pauses.
- It runs in fullscreen. Switching tabs or leaving fullscreen is a warning; on warning 3 the exam stops and is scored as it stands, and a stopped exam cannot earn the certificate.
- Every attempt counts from the moment it starts, so close other tabs first.
Each live lab is worth 5 points of the total score.
Unlock this track
Pick how you want to learn
This track is part of Config Pro.
Most popular
Config Pro
from$72/ month
Term saving: $94 (22%) vs buying 3 months again and again
Term saving: $187 (22%) vs buying 3 months again and again
Savings are against renewing the 3-month plan. No auto-renewal.
- Everything in Essential
- Every Pro track, including this one
- Ticket Labs: 100 days as a network engineer
- Pro devices: Arista, Check Point, F5, Versa and more
Most complete
Config Expert
from$100/ month
Term saving: $200 (17%) vs buying 3 months again and again
Savings are against renewing the 3-month plan. No auto-renewal.
- Everything in Config Pro
- Every Expert track, on top of all of Pro
- Full 8-hour mock labs with scorecards
6-month and 1-year plans lower the monthly cost. See all pricing