Q1. What is the Palo Alto Networks Certified Network Security Administrator (PCNSA)?

The Palo Alto Networks Certified Network Security Administrator (PCNSA) certifies that
individuals have demonstrated knowledge of key features of Palo Alto Networks next-generation
firewalls and can effectively deploy the firewalls to securely enable traffic based on who (users),
what (applications), when (time-based policy), and how (content). Palo Alto Networks next-
generation firewalls that are configured correctly enable administrators to prevent successful
cyberattacks.

Watch the promotional video for more information.

Q2. Who should take the PCNSA certification exam?

The Palo Alto Networks Certified Network Security Administrator exam is a formal certification
exam that can be attempted by anyone who has completed either the EDU-210 or EDU-110
course. The PCNSA exam is based on the current PAN-OS® release.

• PCNSA Study Guide

• EDU-110
• EDU-210

Q3. What is the format of the PCNSA exam?

• Certification Name: Palo Alto Networks Certified Network Security Administrator

• Delivered through Pearson VUE: https://home.pearsonvue.com/paloaltonetworks
• Exam Series: PCNSA
• Total Seat Time: 90 minutes
• Time for Exam Items: 80 minutes
• Time for reviewing Palo Alto Networks Exam Security Policy: 5 minutes, and 5 minutes
for Survey
• Number of items: 50
• Format: Multiple choice, scenarios with graphics, and matching
• Language: English

Q4. Which topics does the PCNSA exam cover?

PCNSA is a formal, industry-recognized certification program that validates detailed knowledge

of core features and functions of Palo Alto Networks next-generation firewalls. This certification
covers the following topics:

• Next-Generation Security Platform and Architecture

• Firewall Configuration
• Security and NAT Policies
• App-ID™
• Content-ID™

PALO ALTO NETWORKS PCNSA FAQ 2

 • User-ID™
• URL Filtering
• Monitoring and Reporting
• Security Best Practices

Q5. How should I prepare for the PCNSA exam?

To prepare for the PCNSA, you will need experience in deploying, operating, and managing the
Palo Alto Networks next-generation firewall.
Recommended resources available to you include:
• EDU-110
• EDU-210
• PCNSA: Study Guide
• Practice Questions for PCNSA

Q6. Where do I sign up to take the exam?

The PCNSA exam is hosted and proctored by a third-party testing company, Pearson VUE.
Pearson VUE has testing facilities in major cities worldwide.
Please visit the Pearson VUE website at https://home.pearsonvue.com/paloaltonetworks/ to
schedule an exam.

Q7. How much does the exam cost?

The price to be seated for a PCNSA is USD$140. Each attempt must be paid for by the exam
taker. Prices can vary by country, depending on various factors such as VAT.

Q8. What should I do if I need to change my exam date after I’ve scheduled it?

You can cancel an exam, free of charge, up to three (3) business days before the scheduled
time slot of the exam. You can sign up for a new date and apply the payment toward the new
exam date.
However, if you cancel during the three (3) business days before your scheduled exam, there
will be no refund. If you want to take the exam on a later date, you must pay the full USD$140
for the new appointment.

Q9. Do I get a certificate after I pass the exam?

Yes. Upon passing, you will receive an email with instructions about how to access our
Certification Management System. From there you can download your PCNSA eCertificate,

PALO ALTO NETWORKS PCNSA FAQ 3

Logos, and Digital Badge, and receive guidelines for including the credential in your email
signature.

Q10. Can I use the Logo on my business cards?

Yes. You can use the Logo as long as you keep an Active certification status.

Q11. What happens if I don't pass the exam?

You will receive a score report that suggests the Domain areas in which you need to focus.
Before you try to take the exam again, please refer to the Certification Exam Retake Policy.

Q12. What is the Certification Exam Retake Policy?

Palo Alto Networks requires any candidate that fails their first attempt to pass any certification
exam to wait five (5) business days. A candidate that fails their second attempt must wait 15
business days before they take the exam again. Any candidate that is unsuccessful after the
third attempt must contact certification@paloaltonetworks.com before making any additional
attempts.

Q13. What are the recertification requirements?

The PCNSA certification is valid for two years from the date you pass the exam. You must
wait six months after becoming certified before taking another PCNSA exam.
To keep your certification in Active status, you must recertify by taking one of the following
exams: PCNSA or PCNSE.

Q14. How do I check whether my PCNSA certification is about to expire?

You can log in to our Certification Management System and look at the “Certifications” section to
check whether your certification is still active or is about to expire.
Contact us at certification@paloaltonetworks.com if you have additional questions.

PALO ALTO NETWORKS PCNSA FAQ 4