FortiOS Administrator Exam | Training Institute

Certification

This exam is part of the following certification track:

Visit the Cybersecurity Certification page for information about certification requirements.

Exams available at Pearson VUE are listed below. Select an exam to view the details.

Fortinet NSE 4 - FortiOS 7.6 Administrator

Status: Available

The Fortinet NSE 4 - FortiOS 7.6 Administrator exam evaluates your knowledge of, and expertise in, FortiGate devices.

This exam tests your applied knowledge of FortiGate configuration, operation, and day-to-day administration, and includes operational scenarios, configuration extracts, and troubleshooting captures.

Once you pass the exam, you will receive the following exam badge:

Audience

The Fortinet NSE 4 - FortiOS 7.6 Administrator exam is intended for network and security professionals who are responsible for the configuration and administration of firewall solutions in an enterprise network security infrastructure.

Exam Details

Exam name	Fortinet NSE 4 - FortiOS 7.6 Administrator
Time allowed	80–90 minutes
Exam questions	50–55 questions
Scoring	Pass or fail. A score report is available from your Pearson VUE account.
Language	English and Japanese
Product version	FortiOS 7.6.0

Exam Topics

Successful candidates have applied knowledge and skills in the following areas and tasks:

Deployment and system configuration (20–25% of the exam)

Tasks	Details
Perform initial configuration	FortiGate factory default settings FortiGuard licenses FortiGate administrative access FortiGate as a DHCP server System configuration file backup and restore FortiGate firmware upgrades Use cases
Configure log settings and diagnose problems using the logs	Log workflow Log storage options Device registration on FortiAnalyzer Log message viewing and searching
Configure FortiGate Clustering Protocol (FGCP) high-availability (HA) cluster	FortiGate HA HA setting modifications Session synchronization for seamless failover HA management interface Typical operation of an HA cluster HA cluster firmware upgrade Use cases
Diagnose resource and connectivity problems	Abnormal behavior monitoring Physical and network layer problems Connectivity problems—sniffer and debug flow Resource problems—high CPU and memory usage Memory conserve mode Use cases—troubleshoot resource and connectivity problems
Describe FortiGate Cloud-Native Firewall (CNF) and FortiGate VMs in the public cloud	Threats and challenges in the public cloud Fortinet public cloud solutions FortiGate VMs in the cloud FortiGate CNF Use cases—FortiGate CNF and FortiGate VMs in the cloud
Explain FortiSASE administration and user onboarding methods	Challenges with remote work Secure access service edge (SASE) architecture FortiSASE components Security features Use cases—FortiSASE

Firewall policies and authentication (20–25% of the exam)

Tasks	Details
Configure firewall policies	Firewall policies Inspection modes for firewall policies Firewall policy traffic logs Use cases
Configure source network address translation (SNAT) and destination network address translation (DNAT) options in firewall policies	SNAT configuration Firewall policy to perform DNAT using virtual IP (VIP) addresses Use cases DNAT settings using a VIP
Configure different methods of firewall authentication	Remote LDAP authentication server on FortiGate Remote RADIUS authentication server on FortiGate Active and/or passive authentication Firewall user monitoring on the FortiGate GUI Use cases
Explain how to deploy and configure Fortinet Single Sign-On (FSSO)	FSSO in domain controller (DC) agent mode Collector agent FSSO login issues Use cases—FortiGate FSSO authentication

Content inspection (25–30% of the exam)

Tasks	Details
Explain and inspect encrypted traffic using certificates	Full SSL/SSH inspection for outbound traffic Private certificate authority (CA) certificates on endpoints Certification issues Use cases
Identify FortiGate inspection modes and configure web filtering	Inspection mode (flow or proxy) based on security needs Certificate inspection for web filtering Web filter profiles in flow-based and proxy-based inspection modes FortiGuard categories URL filters Web filtering issues Use cases
Configure application control to monitor and control network applications	Application control in profile mode Application control event monitoring Traffic matching with application control profile issues Use cases—application traffic controlling
Configure antivirus scanning modes to neutralize malware threats	Antivirus profiles in flow-based and proxy-based inspection modes Protocol options Antivirus events—log and monitor Common antivirus issues
Configure an intrusion prevention system (IPS) to protect a network from threats and vulnerabilities	IPS sensors IPS high-CPU usage issues Use cases—Blocking known exploits

Routing (10–15% of the exam)

Tasks	Details
Configure and route packets using static routes	Static routing Routing table on FortiGate Route redundancy and load balancing Use cases
Configure SD-WAN to load balance traffic between multiple WAN links effectively	SD-WAN concepts Main use cases for SD-WAN SD-WAN on FortiGate Routing behavior in an SD-WAN context SD-WAN behavior, link usage, and quality status Use cases

VPNs (10–15% of the exam)

Tasks	Details
Implement a meshed or partially redundant IPsec VPN	IPsec VPN concepts IPsec VPN using the IPsec wizard Redundant VPN between two FortiGate devices IPsec VPNs and review logs IPsec VPN issues Use cases

Training Resources

The following resources are recommended for attaining the knowledge and skills that are covered on the exam. The recommended training is available as a foundation for exam preparation. In addition to training, you are strongly encouraged to have hands-on experience with the exam topics and objectives.

FortiOS 7.6 Administrator course and hands-on labs
FortiOS 7.6.0—Administration Guide
FortiOS 7.6.0—New Features
FortiSASE—Administration Guide
- Introduction
- Network
- Client onboarding
FortiGate CNF—Administration Guide
- Introduction
- Onboarding
- Deployment scenarios
FortiGate Public Cloud 7.6.0—AWS Administration Guide
- Single FortiGate-VM deployment
FortiGate Public Cloud 7.6.0—Azure Administration Guide
- Single FortiGate-VM deployment

Experience

1–2 years of experience with networking
0–1 year of experience with network security
Minimum of 6 months of hands-on experience with FortiGate

Exam Sample Questions

A set of sample questions is available from the Fortinet Training Institute. These questions represent the exam content in question type and content scope. However, the questions do not necessarily represent all the exam content, nor are they intended to assess your readiness to take the certification exam.

See the Fortinet Training Institute for the course that includes the sample questions

Examination Policies and Procedures

The Fortinet Training Institute recommends that you review the exam policies and procedures before you register for the exam. Access important information on the Fortinet Training Institute Policies page, and find answers to common questions on the FAQ page.

Questions?

If you have more questions about the NSE Certification Program, contact us through the Fortinet Training Institute Helpdesk page.