Skip to main content
Training Institute
  • Library
  • Schedule
  • Certifications
  • ATC
  • Academic Partner Program
  • Fast Track Workshops
  • More
Log in
Contents
Library Schedule Certifications ATC Academic Partner Program Fast Track Workshops

FortiSandbox Administrator

Blocks

Certification

This exam is part of the following certification track:

FCP - Security Operations Certification Badge

Visit the Cybersecurity Certification page for information about certification requirements.

Exams available at Pearson VUE are listed below. Select an exam to view the details.

Fortinet NSE 5 - FortiSandbox 5.0 Administrator

Status: Available

The Fortinet NSE 5 - FortiSandbox 5.0 Administrator exam evaluates your knowledge and expertise with FortiSandbox administration.

This exam tests your knowledge of FortiSandbox configuration and operation. It covers scenarios such as incident analysis; integration with FortiGate, FortiMail, FortiWeb, FortiClient EMS, and third-party products; and troubleshooting.

Once you pass the exam, you will receive the following exam badge:

Audience

The Fortinet NSE 5 - FortiSandbox 5.0 Administrator exam is designed for network and security professionals responsible for designing, implementing, and maintaining a Fortinet advanced threat protection (ATP) solution using FortiSandbox.

Exam Details
Time allowed 65 minutes
Exam questions 30–40 questions
Scoring Pass or fail. A score report is available from your Pearson VUE account.
Language English
Product version FortiSandbox 5.0
Exam Topics

Successful candidates have applied knowledge and skills in the following areas and tasks:

  • Deployment and system settings
    • Explain solutions for different stages of the Cyber Kill Chain
    • Configure system settings
    • Configure an HA cluster
    • Troubleshoot system issues
  • Scanning and rating components
    • Describe the FortiSandbox scanning components
    • Manage guest VMs
    • Configure scan options
  • Integration
    • Configure Fortinet Security Fabric integration
    • Configure third-party integration
    • Troubleshoot integration issues
    • Identify Fortinet ATP) deployments
  • Results analysis
    • Explain common attack vectors
    • Analyze malware behavior
    • Analyze scan job reports
Training Resources

The following resources are recommended for attaining the knowledge and skills that are covered on the exam. The recommended training is available as a foundation for exam preparation. In addition to training, you are strongly encouraged to have hands-on experience with the exam topics and objectives.

  • FortiSandbox 5.0 Administrator course and hands-on labs
  • FortiSandbox 5.0—Administration Guide
    • Refer to the Adapter, Network Share, Quarantine, and Sniffer section of the Administration Guide for third-party integration related information.
    • Refer to the Analytics Settings section of the User Guide for UEBA-related information.
  • FortiSandbox 5.0—Best Practices Guide
  • FortiSandbox 5.0—Log Message Reference
  • FortiSandbox 5.0—CLI Reference
Experience

A minimum of 6 months of hands-on experience with FortiSandbox is recommended.

Exam Sample Questions

A set of sample questions is available from the Fortinet Training Institute. These questions represent the exam content in question type and content scope. However, the questions do not necessarily represent all the exam content, nor are they intended to assess your readiness to take the certification exam.

See the Fortinet Training Institute for the course that includes the sample questions

Examination Policies and Procedures

The Fortinet Training Institute recommends that you review the exam policies and procedures before you register for the exam. Access important information on the Fortinet Training Institute Policies page, and find answers to common questions on the FAQ page.

Questions?

If you have more questions about the NSE Certification Program, contact us through the Fortinet Training Institute Helpdesk page.

Data retention summary