PSAA study guide
PSAA · Work through your exam, one topic at a time.
The PSAA is a Palo Alto Networks certification credential. The official certification page listed for it currently returns a 404 error, so the exam blueprint, question count, time limit, passing score, fee, retake policy, and validity period cannot be confirmed from the permitted source. The PSAA study guide has 7 sections and about 2,191 words.
01AI Security
The AI Security domain tests whether you can let people use generative AI and internal models without losing control of data, and whether you can defend AI systems themselves. Expect questions on discovering unsanctioned AI apps, inline guardrails, prompt and response inspection, model and dataset supply-chain risk, and agentic features that can take actions.
337 words, about 2 min02Network Security
Network Security covers enforcement on the traffic path: security policy, application identification, segmentation, decryption, and threat prevention. The exam tests whether you can reason about policy order, zone trust, and which control actually sees the traffic, rather than reciting product menus.
332 words, about 2 min03SASE
SASE tests your ability to deliver consistent security and connectivity for mobile users, branches, and private apps from a cloud-delivered edge. Questions focus on how traffic reaches the security stack, how private apps are published, and how policy, CASB, DLP, and digital experience fit together.
343 words, about 2 min04Security Operations
Security Operations tests how you turn telemetry into resolved incidents: ingestion, normalization, detection, correlation, triage, and response. The exam favors reasoning about data quality and incident logic over memorizing console screens.
293 words, about 1 min05Cloud Security
Cloud Security tests whether you can find and prioritize real risk in cloud accounts: misconfiguration, identity excess, vulnerable workloads, exposed data, and insecure infrastructure as code. The key skill is ranking findings by exploitability and business impact rather than by raw count.
286 words, about 1 min06Observability & Remediation
Observability and Remediation tests whether you can prove where a user experience or security problem originates and then close the loop. Expect questions on telemetry sources, synthetic versus real-user monitoring, hop-by-hop analysis, root cause, and verified remediation.
301 words, about 2 min07Identity Security
Identity Security tests how authentication, authorization, and identity governance controls are configured and attacked. The exam expects you to separate proving who a user is from deciding what that user may do, and to recognize identity as the primary lateral-movement path.
299 words, about 1 min