Status: 
Coming Soon
The Fortinet NSE 8 - Core Practical exam evaluates your comprehensive knowledge of network security design, configuration, and troubleshooting for complex networks. To attempt this exam, you must have industry experience.
Once you pass the exam, you will receive the following exam badge:
Audience
The Fortinet NSE 8 - Core Practical exam is intended for networking and security experts who use Fortinet solutions. In addition to formal training, you should have experience with a variety of complex networks and be able to solve complicated security problems.
Exam Details
| Exam name |
Fortinet NSE 8 - Core Exam |
| Format |
Onsite at select Fortinet offices and events |
| Cost |
US$800 per exam |
| Language |
English |
| Number of tasks |
To be communicated per exam |
| Appointment time |
To be communicated per exam |
| Task scoring method |
Partial credits are available for select tasks. There are no deductions for incorrect answers. |
| Task types |
Hands-on configuration, troubleshooting, drag and drop, and multiple choice |
| Time required between unsuccessful attempts |
30 days |
| Time for acknowledgment and training transcripts to be updated with exam grade |
30 days |
| Scoring |
Pass or fail |
| Products |
FortiGate 7.6, FortiManager 7.6, FortiAnalyzer 7.6, and FortiAuthenticator 8.0 |
Exam Topics
The tasks listed in this table represent potential content areas covered in this exam. Your knowledge and skills in these areas will be assessed through design, configuration, and troubleshooting tasks.
Infrastructure (27% of the exam)
| Tasks |
Details |
| availability (HA) |
- Aggregation (Link Aggregation Control Protocol (LACP))
- FortiGate Clustering Protocol (FGCP)
- FortiGate Session Life Support Protocol (FGSP)
- FortiAnalyzer HA
- FortiAuthenticator HA
- FortiManager HA
- Virtual clustering
- Virtual Router Redundancy Protocol (VRRP)
|
| architecture |
- Application performance
- Multi-data-center deployments
- Redundant connectivity
- Work from anywhere
|
| optimization |
- Hardening
- Performance tuning
|
| management |
- FortiGate-VM bootstrapping
- Firmware management
- FortiAnalyzer integration
- FortiGuard
- FortiManager policy packages
- Log management
- Multi-tenancy
- Virtual domains (VDOM)
- Operation modes
- VM deployments
- Workspace mode
|
Networking (40% of the exam)
| Tasks |
Details |
| access service edge (SASE) |
- Secure Private Access (SPA) preparation
- SD-WAN on-ramp
- SPA
|
| |
- Asymmetric routing
- BFD
- Dynamic routing
- Equal-cost multi-path (ECMP)
- Multicast
- Policy routing
- Policy-based routing (PBR)
- SD-WAN routing
- Static routing
- Virtual routing and forwarding (VRF)
|
| |
- Auto-discovery VPN (ADVPN)
- Dial-up VPN
- IPsec VPN
- Overlay VPN
- Post-quantum cryptography (PQC) for IPsec key exchange
- SD-WAN
- SSL VPN
- Virtual eXtensible LAN (VXLAN) over IPsec
- Zero trust network access (ZTNA)
|
| firewall (NGFW) |
- Fabric integrations
- Inspection modes
- IPv6
- Policy modes
- Proxy rules
- Security profiles
- Data loss prevention (DLP)
- Web filtering
- SSL inspection
- Intrusion prevention system (IPS)
- Transparent mode
|
| networking |
- Asymmetric routing
- Explicit proxy
- Inter-VDOM routing
- IPv6
- Local-in policies
- Local-out routing
- Network address translation (NAT)
- Traffic shaping
- Transparent mode
- Transparent proxy
- VLANs
- Zones
|
Authentication (14% of the exam)
| Tasks |
Details |
| solutions |
- 802.1X
- ADOM-scoped administrators
- Advanced authentication
- API authentication
- Captive portal
- Device and user authentication
- Fabric single sign-on (SSO)
- Fortinet Single Sign-On (FSSO)
- Identity and access management (IAM)
- LDAP
- Open authorization (OAuth)
- RADIUS
- RADIUS single sign-on (RSSO)
- SAML
- SNMPv3
- Single sign-on mobility agent (SSOMA)
- syslog SSO
- Terminal Access Controller Access-Control System Plus (TACACs+)
|
| management |
- Certificate authority
- Certificate-based authentication
- Certificate Management Protocol (CMP)
- Online Certificate Status Protocol (OCSP)
- Public key infrastructure (PKI)
- Simple Certificate Enrollment Protocol (SCEP)
|
Fortinet Security Fabric (19% of the exam)
| Tasks |
Details |
| |
- Automation parameters
- Automation stitches
- Automated scripts
- Fortinet device APIs
- Meta fields
|
| management |
- Fabric integration
- Fabric objects
- Threat feeds
|
| and analytics |
- Custom FortiAnalyzer views
- Device logging
- Event handlers
- FortiView
- Incidents and events
- Log management
- Network triaging
- Operation modes
- Reporting
|
Training Resources
The following resources are recommended for attaining the knowledge and skills that are covered on the exam. The recommended training is available as a foundation for exam preparation. In addition to training, you are strongly encouraged to have hands-on experience with the exam topics and objectives.
Experience
You should have experience with a variety of complex networks and be able to solve complicated security problems.