thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Palo Alto Networks · Cybersecurity · Professional

Palo Alto Networks Certified SASE Engineer exam guide

Exam Security Service Edge Engineer (Specialist)

Palo Alto now lists this credential as Security Service Edge (SSE) Engineer; it covers the Prisma Access side of SASE. It validates planning, deploying, administering and troubleshooting Prisma Access, including Prisma Browser, which are core skills as organisations replace VPNs with cloud-delivered security in 2026.

QuestionsSee official page
Time limitSee official page
Passing score860 (300-1000 scale)
Exam fee$250 USD
Valid for2 years
DeliveryPearson VUE test center; online proctoring (OnVUE) where offered

Format: Multiple choice, matching and ordering items.

Who it's for

Network and security engineers with about 3 years in network security and 1-2 years on Prisma Access.

What the exam covers

Prisma Access Planning and Deployment22%
Prisma Access Services22%
Prisma Browser22%
Prisma Access Troubleshooting18%
Prisma Access Administration and Operation16%

Eligibility & prerequisites

Required: None formally. Palo Alto recommends Cybersecurity Practitioner and Network Security Professional first.

Recommended: About 3 years in network security and 1-2 years with Palo Alto Networks Prisma Access.

Keeping it active

Valid 2 years from passing. Renew by retaking the current exam before expiry; passing a higher-level certification in the same track also extends active lower-level certifications by 2 years.

Skills & careers

Skills it validates

  • Prisma Access mobile user and remote network deployment
  • Service connections and routing
  • ZTNA and GlobalProtect configuration
  • Prisma Browser policy and deployment
  • Strata Cloud Manager administration
  • Troubleshooting connectivity and policy

Job roles

SASE EngineerSSE EngineerPrisma Access EngineerNetwork Security EngineerCloud Security Engineer

Where it fits in your path

Planning a degree too? See how this cert earns college credit in the College Credit Navigator.

Build my study plan

  1. Week 1: Planning and deployment: Prisma Access architecture, licensing, IP pools, mobile users, remote networks, service connections.
  2. Week 2: Services: ZTNA connector, GlobalProtect, DNS security, CASB/SaaS security, explicit proxy.
  3. Week 3: Prisma Browser (22%): deployment, policies and data protection controls.
  4. Week 4: Administration in Strata Cloud Manager and troubleshooting; datasheet review and practice.

Make it yours: pick your exam date and weekly hours. We'll split your time by domain weight and give you a printable plan.

Exam-day tips

  • Prisma Browser is a full 22% domain; do not skip it if you have only used Prisma Access.
  • Know when to use service connections vs remote networks.
  • Expect troubleshooting items on routing between Prisma Access and data centers.
  • Book under the current exam name, Security Service Edge Engineer, on Pearson VUE.

Key terms for this exam

All 7 terms Study with thinQcards™

Frequently asked questions

How much does the Security Service Edge Engineer exam cost?

$250 plus applicable taxes; vouchers are sold through the Pearson VUE voucher store.

What score do I need to pass?

Palo Alto Networks sets the converted passing score at 860 on a 300-1000 scale.

How long is the certification valid?

Two years. Retake the exam before it expires, or earn a higher-level certification in the same track to extend it.

Is this the SASE Engineer exam?

Palo Alto's certification page and Pearson VUE now list Security Service Edge Engineer for Prisma Access; SD-WAN (the other half of SASE) has its own SD-WAN Engineer exam.

What experience is recommended?

About 3 years in network security and 1-2 years with Prisma Access.

Official page: www.paloaltonetworks.com. Reviewed November 2026. Vendors change fees and objectives, so confirm with the vendor before you book. Spot something out of date? Tell us.