Prisma Cloud CNAPP Technology Syllabus

• Explain Prisma Cloud architecture and CNAPP capabilities using current Palo Alto Networks terminology and connect it to the Prisma Cloud CNAPP architecture
• Practice: map the components, identities, data paths and trust boundaries for Prisma Cloud architecture and CNAPP capabilities
• Evidence: produce an annotated architecture diagram and explain the validation result

• Explain Cloud account onboarding and permission design using current Palo Alto Networks terminology and connect it to the Prisma Cloud CNAPP architecture
• Practice: compare a baseline design with a risky or incomplete design for Cloud account onboarding and permission design
• Evidence: produce a design decision record and explain the validation result

• Explain Asset inventory, alerts and policy model using current Palo Alto Networks terminology and connect it to the Prisma Cloud CNAPP architecture
• Practice: trace one permitted and one denied access decision for Asset inventory, alerts and policy model
• Evidence: produce an access-flow worksheet and explain the validation result

• Explain Cloud Security Posture Management using current Palo Alto Networks terminology and connect it to the Prisma Cloud CNAPP architecture
• Practice: plan a least-privilege configuration and a safe rollout sequence for Cloud Security Posture Management
• Evidence: produce a change plan with rollback steps and explain the validation result

• Explain Cloud Infrastructure Entitlement Management using current Palo Alto Networks terminology and connect it to the Prisma Cloud CNAPP architecture
• Practice: review policy order, dependencies, exceptions and rollback conditions for Cloud Infrastructure Entitlement Management
• Evidence: produce a policy review checklist and explain the validation result

• Explain Data Security Posture Management using current Palo Alto Networks terminology and connect it to the Prisma Cloud CNAPP architecture
• Practice: configure or assess the control with secure defaults for Data Security Posture Management
• Evidence: produce a configuration evidence sheet and explain the validation result

• Explain Host, container and serverless workload protection using current Palo Alto Networks terminology and connect it to the Prisma Cloud CNAPP architecture
• Practice: test expected and unexpected behavior against explicit pass criteria for Host, container and serverless workload protection
• Evidence: produce a pass/fail validation record and explain the validation result

• Explain Kubernetes admission and runtime defense using current Palo Alto Networks terminology and connect it to the Prisma Cloud CNAPP architecture
• Practice: locate the relevant telemetry and build an investigation timeline for Kubernetes admission and runtime defense
• Evidence: produce an investigation timeline and explain the validation result

• Explain Infrastructure-as-code and code-to-cloud security using current Palo Alto Networks terminology and connect it to the Prisma Cloud CNAPP architecture
• Practice: triage a realistic finding and separate risk from expected activity for Infrastructure-as-code and code-to-cloud security
• Evidence: produce a triage note with severity rationale and explain the validation result

• Explain Vulnerability prioritization and attack paths using current Palo Alto Networks terminology and connect it to the Prisma Cloud CNAPP architecture
• Practice: tune a noisy control without removing required visibility for Vulnerability prioritization and attack paths
• Evidence: produce a tuning record with before-and-after evidence and explain the validation result

• Explain Alert rules, integrations and automation using current Palo Alto Networks terminology and connect it to the Prisma Cloud CNAPP architecture
• Practice: troubleshoot a production-style failure using an evidence-first workflow for Alert rules, integrations and automation
• Evidence: produce a troubleshooting runbook entry and explain the validation result

• Explain Code-to-cloud security capstone using current Palo Alto Networks terminology and connect it to the Prisma Cloud CNAPP architecture
• Practice: combine design, validation, operations and handover in the capstone for Code-to-cloud security capstone
• Evidence: produce a concise capstone handover and portfolio artifact and explain the validation result

This is a published technology learning blueprint. Contact Techclick to confirm current trainer availability, delivery format, schedule, lab access and pricing before making a decision.

No. Vendor certification programmes and exam blueprints change independently. This syllabus focuses on practical technology skills and official documentation.

Yes, subject to trainer and lab availability. Share your existing environment, target outcomes and preferred timeline for a scoped discussion.