Skip to main content
Training Institute
  • Library
  • Schedule
  • Certifications
  • ATC
  • Programs
    Academic Partner Program Education Outreach Program Veterans Program Fast Track Workshops
  • More
Log in
Contents
Library Schedule Certifications ATC Programs Collapse Expand
Academic Partner Program Education Outreach Program Veterans Program Fast Track Workshops

FortiRecon Analyst

Blocks

Certification

This exam is part of the following certification track:

Visit the Cybersecurity Certification page for information about certification requirements.

Exams available at Pearson VUE are listed below. Select an exam to view the details.

Fortinet NSE 6 - FortiRecon 26 Analyst

Status: Available

The Fortinet NSE 6 - FortiRecon 26 Analyst exam evaluates your knowledge and expertise with using FortiRecon to identify and manage an organization’s attack surface.

This exam tests your applied knowledge of FortiRecon configuration and operation, and includes operational scenarios, incident analysis, automation, and troubleshooting scenarios.

Once you pass the exam, you will receive the following exam badge:

Audience

The Fortinet NSE 6 - FortiRecon 26 Analyst exam is intended for network and security professionals responsible for threat analysis and attack surface management using FortiRecon.

Exam Details
Exam name Fortinet NSE 6 - FortiRecon 26 Analyst
Exam time 60 minutes
Exam questions 30–40 questions
Scoring Pass or fail. A score report is available from your Pearson VUE account.
Language English
Product version FortiRecon 26
Exam Topics

Successful candidates have applied knowledge and skills in the following areas and tasks:

FortiRecon deployment (25–35% of the exam)
Tasks Details
Explain the attack surface and how FortiRecon solves cyberthreats
  • Attack surface monitoring
  • Dark web
  • FortiRecon interaction with Tor traffic
  • Cybercrime markets
  • Open-source intelligence (OSINT)
Provision FortiRecon
  • FortiRecon license and initial access
  • FortiRecon provisioning form
  • FortiRecon seed data information
Onboard managed security service provider (MSSP) tenants to FortiRecon
  • FortiRecon MSSP onboarding prerequisites
  • FortiRecon onboarding as an MSSP
  • FortiRecon onboarding an MSSP client
FortiRecon core module analysis (25–30% of the exam)
Tasks Details
Analyze attack surface management (ASM) data
  • Attack surface management
  • FortiRecon exposed services and technologies
  • Prioritizing security issues
  • Credential breaches and web application assessment
  • Internal Attack Surface Management (IASM)
Analyze FortiRecon Brand Protection (BP) data
  • FortiRecon Brand Protection
  • Domain and social media threats
Analyze adversary-centric intelligence (ACI) data
  • How attackers plan attacks
  • FortiRecon adversary centric intelligence
  • FortiRecon ACI components
Intelligence reports (15–25% of the exam)
Tasks Details
Analyze FortiRecon intelligence reports
  • FortiRecon reports
  • Report objectives and data
  • Report workflow and report characteristics
Access FortiRecon core intelligence reports
  • Accessing core reports
  • Report purposes
  • Useful reports for SOC teams
Security orchestration and APIs (15–25% of the exam)
Tasks Details
Configure FortiRecon playbooks in the Security Orchestration module
  • Automation
  • Security orchestration
  • Playbooks
Configure FortiRecon APIs
  • APIs
  • FortiRecon integration
  • FortiRecon API examples
Training Resources

The following resources are recommended for attaining the knowledge and skills that are covered on the exam. The recommended training is available as a foundation for exam preparation. In addition to training, you are strongly encouraged to have hands-on experience with the exam topics and objectives.

  • FortiRecon 26 Analyst course and hands-on labs
  • FortiRecon 26—User Guide
  • FortiRecon 26—FortiRecon for Managed Security Services Providers (MSSPs) guide
Experience

A minimum of 6 months of hands-on experience with FortiRecon or equivalent technology is recommended.

Exam Sample Questions

A set of sample questions is available from the Fortinet Training Institute. These questions represent the exam content in question type and content scope. However, the questions do not necessarily represent all the exam content, nor are they intended to assess your readiness to take the certification exam.

See the Fortinet Training Institute for the course that includes the sample questions

Examination Policies and Procedures

The Fortinet Training Institute recommends that you review the exam policies and procedures before you register for the exam. Access important information on the Fortinet Training Institute Policies page, and find answers to common questions on the FAQ page.

Questions?

If you have more questions about the NSE Certification Program, contact us through the Fortinet Training Institute Helpdesk page.

Data retention summary