PAPA study materials
PAPA study resources

PAPA study guide

PAPA · Work through your exam, one topic at a time.

The Palo Alto Networks Certified Professional Accreditation (PAPA) is listed under Palo Alto Networks Education & Training as a professional-level accreditation, and this page is an independent study resource for candidates preparing for it. Our profile covers four domains: AI Security, Network Security, Security Operations, and Cloud Security, each weighted at 25 percent. These weights are provisional placeholders, not official figures. There is an important caveat you should read before planning anything. Topics on this exam: AI Security, Network Security, Security Operations, and Cloud Security. The PAPA study guide has 4 sections and about 1,515 words.

01

AI Security

The AI Security domain tests whether you can protect AI systems and safely wire AI into security workflows. Questions focus on how models are attacked - prompt injection, training-data poisoning, model theft - and on the controls that contain those attacks: how output is handled, how agent permissions are scoped, and what gets logged.

402 words, about 2 min
02

Network Security

The Network Security domain tests whether you can control traffic on purpose: write policy that permits exactly what the business needs, verify it behaves as written, and keep visibility where encryption would otherwise hide everything. Default deny, then permit by application and user rather than by port.

366 words, about 2 min
03

Security Operations

The Security Operations domain tests the detection-and-response loop: how alerts are triaged, how incidents are run, how evidence is kept usable, and how detection content is tuned rather than abandoned. Triage on impact and confidence together, weighted by asset criticality.

369 words, about 2 min
04

Cloud Security

The Cloud Security domain tests how you reach the same outcomes - least privilege, segmentation, visibility, encryption - inside a control plane you do not own. Questions cluster around identity, configuration drift, and where the shared responsibility line actually falls.

378 words, about 2 min