Status:
Coming Soon
The Fortinet NSE 8 - Application Security exam evaluates your comprehensive knowledge of design, configuration, and troubleshooting for complex networks in application security solutions. To attempt this exam, you must have industry experience.
Once you pass the exam, you will receive the following exam badge:

Audience
The Fortinet NSE 8 - Application Security exam is intended for networking and security experts who use Fortinet application security solutions. In addition to formal training, you should have experience with a variety of complex networks and be able to solve complicated security problems.
Exam Details
| Exam name |
Fortinet NSE 8 - Application Security |
| Format |
Onsite and online through the Fortinet Training Institute (proctored through ProctorU) |
| Cost |
US$800 per exam |
| Language |
English |
| Number of tasks |
To be communicated per exam |
| Appointment time |
To be communicated per exam |
| Task scoring method |
Partial credits are available for select tasks. There are no deductions for incorrect answers. |
| Task types |
Hands-on configuration, troubleshooting, drag and drop, and multiple choice |
| Time required between unsuccessful attempts |
30 days |
| Time for acknowledgment and training transcripts to be updated with exam grade |
30 days |
| Scoring |
Pass or fail |
| Products |
All products in the Core exam, FortiADC 8.0, FortiWeb 8.0, FortiMail 7.6, and FortiSandbox 5.2 |
Exam Details
| Exam name |
Fortinet NSE 8 - Application Security |
| Format |
Onsite and online through the Fortinet Training Institute (proctored through ProctorU) |
| Cost |
US$800 per exam |
| Language |
English |
| Number of tasks |
To be communicated per exam |
| Appointment time |
To be communicated per exam |
| Task scoring method |
Partial credits are available for select tasks. There are no deductions for incorrect answers. |
| Task types |
Hands-on configuration, troubleshooting, drag and drop, and multiple choice |
| Time required between unsuccessful attempts |
30 days |
| Time for acknowledgment and training transcripts to be updated with exam grade |
30 days |
| Scoring |
Pass or fail |
| Products |
All products in the Core exam, FortiADC, FortiWeb, FortiMail, and FortiSandbox |
Exam Topics
The tasks listed in this table represent potential content areas covered in this exam. Your knowledge and skills in these areas will be assessed through design, configuration, and troubleshooting tasks.
Email security (27% of the exam)
| Tasks |
Details |
| Email infrastructure |
- Archiving
- DNS security
- Domains
- Email encryption
- Identity-based encryption (IBE)
- Monitoring
- Quarantining
- SMTP, IMAP, and POP3
- User authentication
- Webmail
|
| Antispam and threat protection |
- Antispam profiles
- Antivirus profiles
- Bounce verification
- Content disarm and reconstruction (CDR)
- Content profiles
- Data loss prevention (DLP)
- Endpoint reputation
- IP policies
- Recipient-based policies
- Sandbox integration
- Sender-based policies
- Session profiles
- Threat feeds
- URL filtering
|
Application delivery (44% of the exam)
| Tasks |
Details |
| Application access |
- Application Access Manager
- Single sign-on (SSO)
- Agentless Application Gateway
- Users and authentication
|
| Load balancing |
- Global load balancing (GLB)
- Network security
- Application load balancing
- Scripting
- Server load balancing (SLB)
- Web Cache Communication Protocol (WCCP)
|
| Web security |
- Advanced Bot Protection
- API protection
- Bot mitigation
- DoS protection
- IP protection
- Machine learning (ML)
- Open Web Application Security Project (OWASP) Top 10 list
- Secure connections
- Tracking
- WAF Adaptive Learning 2.0
- Web protection
- Web vulnerability scanning
|
Threat detection (12% of the exam)
| Tasks |
Details |
| Sandbox analysis and detection |
- Air-gapped sandboxing
- Malware behavior analysis
- On-demand scanning
- Risk analysis
- Scan jobs
- Scan policies and objects
- Website scanning
- Network share protection
- Operational technology (OT) protection
- Dedicated internet setup
- Inline sandboxes
|
Infrastructure (17% of the exam)
| Tasks |
Details |
| System management |
- FortiADC clustering
- FortiWeb clustering
- FortiMail clustering
- FortiSandbox clustering
- VDOMs and ADOMs
- Logging and reporting
|
| Integration and protection |
- Mail transfer agent (MTA) and blind carbon copy (BCC) adapter integration
- Operation modes
- Kubernetes Ingress Controller
- Fortinet Security Fabric integration
|
Training Resources
The following resources are recommended for attaining the knowledge and skills that are covered on the exam. The recommended training is available as a foundation for exam preparation. In addition to training, you are strongly encouraged to have hands-on experience with the exam topics and objectives.
Experience
You should have experience with a variety of complex networks and be able to solve complicated security problems.