All certifications / Exam-Day Guides / Palo Alto Networks

Palo Alto Networks exam day

The Next-Generation Firewall Engineer exam is delivered by Pearson VUE and focuses on deploying, configuring and managing Palo Alto Networks firewalls, often through practical scenarios.

Covers: NGFW Engineer NGFW-Engineer

How scoring works

You receive pass or fail at the end of the exam. Palo Alto Networks does not always publish a fixed passing score, so check the exam page and candidate guide.
Exams may include unscored items under evaluation.

Question types

Mainly multiple choice with single and multiple answers. Some questions use screenshots of the management interface or configuration output.
Scenario questions ask which configuration or feature solves a problem, so know where settings live in PAN-OS and Panorama and how policies are evaluated.
Hands-on time with a lab firewall or virtual firewall helps a great deal with interface-based questions.

Time and pacing

Keep a steady pace and use flag-and-review if it is available, returning to long screenshot questions at the end.
Read policy and NAT questions carefully. Rule order and zone direction often decide the answer.

Test center vs online

Exams can be taken at a Pearson VUE test center or online through OnVUE. Online exams require an ID check, workspace photos and a room scan.
Breaks are generally not allowed during online exams. Check your confirmation for current rules.

Booking, retakes and renewal

Book through Palo Alto Networks' certification site and Pearson VUE. Check the current retake waiting periods before rebooking.
The certification is valid for a fixed period. Check Palo Alto Networks' certification policy for the current validity and recertification options.

Policies change. Check the vendor's candidate handbook and your booking confirmation for the current rules.