Palo Alto Networks Certified Cybersecurity Apprentice Questions and Answers
200 questions organized by topic with detailed explanations
Palo Alto Networks
PANW-CA
200 questions
7 topics
Updated May 2026Cybersecurity
32 questions8 easy16 medium8 hard~16% of exam
A contractor with valid credentials copies confidential files to an unsanctioned location. Which classification best gui...A proof-of-concept uses a bug to gain unauthorized access. What should the learner call the proof-of-concept behavior?A server is missing a critical patch, but no attack has occurred yet. What should the learner identify first?
Network Fundamentals
32 questions8 easy16 medium8 hard~16% of exam
A laptop joins a network and automatically receives an IP address and related configuration. Which function provided it?A packet carries user data using IP as the protocol being forwarded across routers. Which category is IP in this context...Routers exchange path information so they can choose where to forward traffic. Which category best fits?
Network Security
28 questions8 easy12 medium8 hard~14% of exam
A learner divides an IP network into smaller logical networks. Which segmentation method is this?An administrator needs encrypted remote shell access to a server. Which tunneling protocol best fits?An employee tries to upload customer records to an unsanctioned SaaS app, and the transfer is blocked by content policy....
Endpoint Security
20 questions4 easy12 medium4 hard~10% of exam
An admin applies patches so attackers cannot use known endpoint flaws. Which component or practice fits?A remote employee laptop must be protected from malware, exploits, and unauthorized access. Which objective is being add...A connected camera, sensor, or smart device communicates over the network. Which endpoint type is this?
Cloud Security
26 questions6 easy12 medium8 hard~13% of exam
A cloud environment is dedicated to one organization. Which deployment model fits?A SaaS provider operates the application, but the customer must configure users and protect sensitive data. Which model ...A provider delivers networking capabilities as a cloud service. Which service model best matches the blueprint?
Security Operations
26 questions6 easy12 medium8 hard~13% of exam
An analyst reviews evidence to determine whether an alert is a true incident. Which function is being performed?A centralized team monitors, investigates, and responds to security activity. Which term fits?A SOC first recognizes suspicious behavior from telemetry and alerts. Which function is being performed?
Identity Security
36 questions12 easy20 medium4 hard~18% of exam
All Questions
| # | Question | Topic | Difficulty |
|---|---|---|---|
| 1 | A laptop joins a network and automatically receives an IP address and related configuration. Which f... | Network Fundamentals | medium |
| 2 | A privileged session is watched in real time and retained for audit. Which component fits? | Identity Security | medium |
| 3 | A cloud environment is dedicated to one organization. Which deployment model fits? | Cloud Security | easy |
| 4 | A contractor with valid credentials copies confidential files to an unsanctioned location. Which cla... | Cybersecurity | hard |
| 5 | A learner divides an IP network into smaller logical networks. Which segmentation method is this? | Network Security | easy |
Sign in to see all 200 questions
Create a free account to browse all questions — completely free during our launch phase.
Ready to test your knowledge?
Take a full Palo Alto Networks Certified Cybersecurity Apprentice practice test with timed exam simulation.
Start Practice Test