- Identify and describe vulnerabilities and exploits
- Identify and describe the stages of the cyber attack lifecycle
- Identify and describe common attack types
- Identify and describe common threat detection systems
Palo Alto Networks Certification Training Course
Palo Alto Networks Certified Cybersecurity Apprentice Certification Training Course
We'll get you ready for the Palo Alto Networks Certified Cybersecurity Apprentice exam, the entry point to the Palo Alto Networks program, with plain-language instruction on cybersecurity, networking, identity and cloud security basics.
Course focus: Cybersecurity basics, network fundamentals, network and endpoint security, cloud security, security operations and identity security, mapped to the official Apprentice blueprint.
Course Overview
What the Cybersecurity Apprentice course covers and who it's for.
Palo Alto Networks describes Apprentice as foundational knowledge in cybersecurity, networking, identity security and cloud security for entry-level and non-technical roles. That makes it a good first credential for students, career changers and IT staff who want to speak security with confidence.
We built the course around the seven domains in the official Apprentice datasheet. Identity security carries the most weight, so we give IAM, PAM, PKI and secrets management real time, then cover attacks and the attack lifecycle, network basics, segmentation and firewalls, endpoints, cloud models and SOC work.
Accumentum is an independent training provider. We are not affiliated with, endorsed by or a partner of Palo Alto Networks, and this isn't official Palo Alto Networks training. Palo Alto Networks sets exam content, fees and policies, so check paloaltonetworks.com before you book.
Course Objectives
Get ready for Cybersecurity Apprentice the way the exam is built.
01
Cover the Whole Blueprint
Work through all 7 domains in the official Cybersecurity Apprentice datasheet, weighted the way the exam weights them.
02
Go Deep on Identity Security
Identity Security is 18% of the exam score per Palo Alto Networks, so it gets the most class time.
03
Practice in a Lab
Hands-on lab work on the tasks the Cybersecurity Apprentice blueprint lists, not just slides.
04
Be Ready for Test Day
The exam is in person at a Pearson VUE test center with multiple choice, matching and ordering items. We practice all three.
Who Should Attend
- Students in high school or college who want a first security credential.
- People moving into cybersecurity from another career.
- Technical and non-technical IT staff who work alongside security teams.
- Anyone planning to move on to Cybersecurity Practitioner.
Prerequisites
- Palo Alto Networks doesn't list a required prerequisite certification, and we don't have enrollment prerequisites either.
- Palo Alto Networks lists no required work experience for Apprentice. Basic comfort with computers and the internet is enough to start.
Pathway Map
The Cybersecurity Apprentice course in 7 modules.
Each module is one domain from the official datasheet, with its exam weight.
Course Content
- Identify and describe types of area networks
- Explain external (north-south) and internal (east-west) traffic flow patterns for environments
- Explain the function of a default gateway
- Explain the function of NAT, DNS, and DHCP
- Identify and describe network segmentation methods
- Explain the function of stateful firewalls and next-generation firewalls (NGFWs)
- Explain the function of URL filtering, VPNs, and proxies
- Identify and describe tunneling protocols
- Identify and describe internet of things (IoT) devices and endpoints
- Explain the objectives of endpoint security
- Identify and describe endpoint security components
- Identify and describe the four cloud-computing deployment models
- Identify and describe common cloud service models
- Explain the cloud shared responsibility model
- Define common cloud terms
- Explain security operations functions
- Identify methods to optimize security operations center (SOC) performance
- Define common security operations terms
- Explain the concepts of false positive alerts and false negative alerts
- Identify and describe identity and access management (IAM) components
- Identify and describe privileged access management (PAM) components
- Identify and describe public key infrastructure (PKI) components
- Identify and describe the components of secrets management
Course Features
How we teach Cybersecurity Apprentice.
Instructor-Led Classes
Live instruction with time for questions, so you aren't figuring out the hard parts alone.
Hands-On Labs
Lab work tied to the tasks in the Cybersecurity Apprentice blueprint.
Blueprint Mapping
Every module maps to a domain in the official Cybersecurity Apprentice datasheet.
Exam Strategy
Practice with multiple choice, matching and ordering questions, plus test center tips.
Certification Exam
About the Cybersecurity Apprentice exam.
Cybersecurity Apprentice Exam Readiness
Our students pass at a 98.8% rate across Accumentum courses. We'll get you ready for Cybersecurity Apprentice the same way.
Per Palo Alto Networks, Cybersecurity Apprentice is a Foundational level exam priced at $150 USD, and taxes may apply. Since August 1, 2025, Palo Alto Networks exams are delivered in person at Pearson VUE test centers only. Exams are in English, with multiple choice, matching and ordering questions.
The certification is valid for two years and you renew by retaking the exam. If you fail, the waits before retakes are 15, 30 and then 90 days. Full details are on the official Cybersecurity Apprentice page.
Accumentum is an independent training provider. We are not affiliated with, endorsed by or a partner of Palo Alto Networks, and this isn't official Palo Alto Networks training. Palo Alto Networks sets exam content, fees and policies, so check paloaltonetworks.com before you book.
Exam Blueprint
Every Cybersecurity Apprentice objective, domain by domain.
We map our lessons to the official Cybersecurity Apprentice datasheet. Here is that blueprint, all 7 domains and 39 objectives, so you can see exactly what is in scope.
Domain 1: Cybersecurity (16%)
1.1 Identify and describe vulnerabilities and exploits
1.2 Identify and describe the stages of the cyber attack lifecycle
1.3 Identify and describe common attack types (for example malware, insider threat, command and control [C2], social engineering, AI-powered)
1.4 Identify and describe common threat detection systems (for example Intrusion Detection System [IDS], Host-Based Intrusion Detection System [HIDS], Network-Based Detection System [NIDS])
1.5 Identify and describe threat prevention systems and practices (for example end user awareness, security updates, antivirus, intrusion prevention systems, firewalls)
1.6 Explain the concept of Zero Trust
Domain 2: Network Fundamentals (16%)
2.1 Identify and describe types of area networks (for example WAN, LAN, SD-WAN)
2.2 Explain external (north-south) and internal (east-west) traffic flow patterns for environments
2.3 Explain the function of a default gateway
2.4 Explain the function of NAT, DNS, and DHCP
2.5 Explain routed protocols and routing protocols
2.6 Explain the TCP/IP model and the OSI model
2.7 Identify and describe devices that operate in Layer 1 through Layer 4 of the OSI model
Domain 3: Network Security (14%)
3.1 Identify and describe network segmentation methods (for example IP subnetting, VLAN, zone)
3.2 Explain the function of stateful firewalls and next-generation firewalls (NGFWs)
3.3 Explain the function of URL filtering, VPNs, and proxies
3.4 Identify and describe tunneling protocols (for example SSH, TLS, IKE)
3.5 Explain the function of data loss prevention (DLP)
3.6 Explain the function of enterprise browsers
Domain 4: Endpoint Security (10%)
4.1 Identify and describe internet of things (IoT) devices and endpoints
4.2 Explain the objectives of endpoint security
4.3 Identify and describe endpoint security components (for example security updates, antivirus, host-based firewalls)
Domain 5: Cloud Security (13%)
5.1 Identify and describe the four cloud-computing deployment models
5.2 Identify and describe common cloud service models (for example Software as a Service [SaaS], Platform as a Service [PaaS], Infrastructure as a Service [IaaS], Network as a Service [NaaS])
5.3 Explain the cloud shared responsibility model
5.4 Define common cloud terms (for example hosted, virtualization, virtual machine, container, microservice, API)
5.5 Explain the cloud native security platform (CNSP)
5.6 Explain the function of continuous integration and continuous delivery / deployment (CI/CD)
Domain 6: Security Operations (13%)
6.1 Explain security operations functions(for exampleIdentify / Detect, Investigate, Mitigate, Improve)
6.2 Identify methods to optimize security operations center (SOC) performance (for example automation and AI, collaboration and information sharing, regular Security policy updates, security framework alignment)
6.3 Define common security operations terms (for example event, alert, SOC, DevSecOps, incident response plan, disaster recovery plan)
6.4 Explain the concepts of false positive alerts and false negative alerts
6.5 Explain the function of syslog
6.6 Explain security orchestration, automation, and response (SOAR) and security information and event management (SIEM)
6.7 Explain AI as it relates to alert analysis
Domain 7: Identity Security (18%)
7.1 Identify and describe identity and access management (IAM) components
- Identity lifecycle management
- Single-factor and multifactor authentication
- Single sign-on (SSO) and federation
- Directory services
- Role-Based Access Control (RBAC)
7.2 Identify and describe privileged access management (PAM) components
- Credential vaulting and rotation
- Session monitoring, isolation, and recording
- Least privilege
- Just-in-time (JIT) access
7.3 Identify and describe public key infrastructure (PKI) components
- Certificate authorities (CAs) and trust chains
- Public / private key pairs in encryption and digital signatures
7.4 Identify and describe the components of secrets management
- Application secrets (for example API keys, SSH keys, passwords, tokens)
- CI/CD pipelines
Before You Start
Who should take Cybersecurity Apprentice.
Here is who Palo Alto Networks says the Cybersecurity Apprentice exam is for and what it expects you to bring, taken from the official datasheet.
Who Palo Alto Networks wrote this exam for
Individuals who want to validate their foundational knowledge of cybersecurity concepts, including an emergent workforce (for example high school and university students), individuals transitioning careers, and technical or non-technical IT professionals
Knowledge, skills and abilities
- networking concepts, models, and protocols
- endpoint security components, standards, and protection
- cloud security concepts, models, and services
- security operations concepts and functions
- identity security components and functions
- cybersecurity lifecycle, threats, identification methods, and prevention methods
- current and emergent trends (for example artificial intelligence, machine learning, and crowdsourced intelligence)
Recommended background
No prior work experience is required. Palo Alto Networks positions this exam as entry level.
Study Plan
How we approach Cybersecurity Apprentice prep.
Identity Security carries 18% of the exam, more than any other domain, so we spend the most lab and review time there.
Palo Alto Networks products change often, and the exam follows the current release. Read the release notes for anything you use in the lab so you aren't studying an old screen.
Our course follows the same blueprint, with on demand lessons you can pause and replay, and our students pass at a 98.8% rate across Accumentum courses.
Exam Policies
The rules around Cybersecurity Apprentice.
Cybersecurity Apprentice lasts two years from your pass date, and Palo Alto Networks renews it when you pass the exam again.
Passing a higher level exam in the same track automatically extends your active lower level certifications in that track by two years.
If you don't pass, you get a results report broken down by domain. Palo Alto Networks requires a 15 day wait before a second attempt, 30 days before a third and 90 days before any attempt after that. After a pass you can't sit the same exam again for 18 months.
Exams are delivered in English through Pearson VUE, and candidates testing in non English speaking countries get a 30 minute time extension by default. Your badge and certificate come through Credly.
Career Outcomes
Where Cybersecurity Apprentice can take you.
Apprentice is a first credential. It won't land a senior job alone, but it shows a hiring manager for help desk, junior SOC or IT support roles that you understand networking, identity and the basics of how attacks work.
The U.S. Bureau of Labor Statistics reports that the median annual wage for information security analysts was $129,180 in May 2025. BLS also projects employment of information security analysts to grow 21 percent from 2025 to 2035, much faster than the average for all occupations. A median is the midpoint, so half earned more and half earned less, and your own pay will depend on location, experience and employer. Source: BLS Occupational Outlook Handbook.
Funding
Ways to pay for Cybersecurity Apprentice training.
Our funding page lays out every way to pay for training, and PathPay lists the courses that qualify for a monthly plan.
Veterans can look at VR&E benefits for career training, and our Veteran Skill Forge programs bundle several courses into one path. Questions about your situation? Contact us and we'll talk it through.
Frequently Asked Questions
Common questions about our Cybersecurity Apprentice course.
Palo Alto Networks Certified Cybersecurity Apprentice is a Foundational level certification from Palo Alto Networks. Details are on the official certification page at https://www.paloaltonetworks.com/services/education/panw-cybersecurity-apprentice.
No. We're an independent training provider and we aren't a Palo Alto Networks partner. Our course follows the public exam blueprint in the official datasheet. Palo Alto Networks offers its own learning paths at learn.paloaltonetworks.com.
Palo Alto Networks lists Foundational exams at $150 USD, and taxes may apply. Vouchers are sold through Pearson VUE and expire 12 months after purchase. Check the current price before you buy.
No. Since August 1, 2025, Palo Alto Networks certification exams are delivered in person at Pearson VUE test centers only.
Two years from the date you pass. You renew by retaking the exam, and passing a higher level exam in the same track renews your active lower level certifications.
Palo Alto Networks doesn't list a required prerequisite certification, and we don't have enrollment prerequisites either. Palo Alto Networks lists no required work experience for Apprentice. Basic comfort with computers and the internet is enough to start.
Instructor-led, with hands-on labs and practice questions. Ask us about upcoming class dates.
Use the registration page linked below, or email info@accumentum.net and we'll follow up with dates and next steps.
7. Per the official datasheet they are Cybersecurity (16%), Network Fundamentals (16%), Network Security (14%), Endpoint Security (10%), Cloud Security (13%), Security Operations (13%), Identity Security (18%).
Identity Security at 18%, per the Palo Alto Networks datasheet.
No prior work experience is required. Palo Alto Networks positions this exam as entry level.
Individuals who want to validate their foundational knowledge of cybersecurity concepts, including an emergent workforce (for example high school and university students), individuals transitioning careers, and technical or non-technical IT professionals.
Palo Alto Networks requires a 15 day wait after a first failed attempt, 30 days after a second and 90 days after a third. Once you pass, you can't retake the same exam for 18 months.
Our PathPay page lists the courses that qualify for a monthly plan. For anything else, contact us and we'll go over options.
Enrollment
Enroll in Cybersecurity Apprentice training with Accumentum.
Enroll in our Cybersecurity Apprentice course to get ready for the Palo Alto Networks Certified Cybersecurity Apprentice exam with instructor-led classes and hands-on labs.
For dates and next steps, use the registration page linked below or email info@accumentum.net.
Ready to start on Cybersecurity Apprentice?
Tell us your target date and we'll help you plan the path.