Status:
Coming Soon
The Fortinet NSE 8 - Security Operations exam evaluates your comprehensive knowledge of network security design, configuration, and troubleshooting for complex networks in security operations solutions. To attempt this exam, you must have industry experience.
Once you pass the exam, you will receive the following exam badge:

Audience
The Fortinet NSE 8 - Security Operations exam is intended for networking and security experts who use Fortinet security operations solutions. In addition to formal training, you should have experience with a variety of complex networks and be able to solve complicated security problems.
Exam Details
| Exam name |
Fortinet NSE 8 - Secure Networking |
| Format |
Onsite and online through the Fortinet Training Institute (proctored through ProctorU) |
| Cost |
US$800 per exam |
| Language |
English |
| Number of tasks |
To be communicated per exam |
| Appointment time |
To be communicated per exam |
| Task scoring method |
Partial credits are available for select tasks. There are no deductions for incorrect answers. |
| Task types |
Hands-on configuration, troubleshooting, drag and drop, and multiple choice |
| Time required between unsuccessful attempts |
30 days |
| Time for acknowledgment and training transcripts to be updated with exam grade |
30 days |
| Scoring |
Pass or fail |
| Products |
All products in the Core exam, FortiSIEM 7.4, FortiSOAR 7.6, FortiEDR 7.0, FortiManager 7.6, and FortiAnalyzer 7.6 |
Exam Topics
The tasks listed in this table represent potential content areas covered in this exam. Your knowledge and skills in these areas will be assessed through design, configuration, and troubleshooting tasks.
Automation (23% of the exam)
| Tasks |
Details |
| Configuration management and scripting |
- FortiManager Jinja scripting
- FortiManager provisioning templates
- Fortinet APIs
|
| Workflow automation and orchestration |
- Automated incident response
- Automation connectors
- FortiAnalyzer playbooks
- Fortinet Security Fabric
- Outbreak alerts
- Security orchestration, automation, and response (SOAR) playbooks
- Workflows and workspaces
- FortiSIEM automation service
|
Analytics and reporting (26% of the exam)
| Tasks |
Details |
| Data processing and reporting |
- Configuration management database (CMDB)
- Compliance reports
- Custom log parsers
- Datasets
- FortiAnalyzer custom reports
- FortiSIEM analytics
- FortiSOAR reports
- Hcache
- Incident reporting
- Security information and event management (SIEM) parsers and monitors
- SQL
- Dashboards
|
| Security incident analysis |
- Case management
- Endpoint detection and response (EDR) security incidents
- Indicators of compromise (IOC)
- Investigation View
- Searches and filters
- SIEM analytics search
|
Threat handling (29% of the exam)
| Tasks |
Details |
| Endpoint detection and response (EDR) |
- EDR threat hunting
- extended Detection and response (XDR)
- Device isolation and remediation
- FortiEDR Connect
|
| Incident response (IR) and management |
- Incident response
- War rooms
- Simulation mode
- Incident handling and response frameworks
|
| Prevention and control |
- Application communication control
- Application control
- Device control
- Execution prevention
- Exfiltration prevention
- Prevention mode
- Ransomware prevention
- Suspicious indicator blocking
- Vulnerability management
|
Infrastructure (22% of the exam)
| Tasks |
Details |
| Access control and platform management |
- Advanced health system
- CMDB
- FortiSIEM collectors
- Device support advanced operations
- HTTP generic poller
- Multi-tenancy
- Role-based access control (RBAC)
- Security management
- Segmented network support
|
| High availability (HA) |
- FortiEDR HA
- FortiAnalyzer HA
- FortiManager HA
- FortiSOAR HA
- FortiSIEM HA
|
| FortiSOAR GUI management |
- Application Editor
- Content Hub
- Modules
- Policy Analyzer management extension application (MEA)
- Queue, shift, and leave management
- Rules, reports, and dashboards
- Solution packs
- Widgets
|
Training Resources
The following resources are recommended for attaining the knowledge and skills that are covered on the exam. The recommended training is available as a foundation for exam preparation. In addition to training, you are strongly encouraged to have hands-on experience with the exam topics and objectives.
Experience
You should have experience with a variety of complex networks and be able to solve complicated security problems.