More study resources

About this exam

The Fortinet Certified Professional (FCP) is a vendor credential for network and security practitioners who design, deploy, and operate FortiGate-based environments. Candidates typically include firewall administrators, network engineers, SOC analysts, and managed-service staff who need to prove practical skill with FortiOS rather than recall of marketing material. The exam tests working knowledge across the Security Fabric, firewall policy and traffic shaping, authentication and access control, SSL VPN and IPsec VPN, web filtering and application control, intrusion prevention and anti-malware, routing and SD-WAN, logging and troubleshooting, and high availability and maintenance. Expect scenario-style multiple-choice items that describe a topology or a symptom and ask for the correct configuration step or the most likely cause. Preparation works best hands-on: build a small lab with at least two FortiGates, practise policy ordering, NAT, VPN tunnels, and log reading, then review Fortinet's official training and documentation. Confirm current exam logistics, including registration, scheduling, and any published scoring or retake rules, directly with Fortinet and its authorized testing partner, since those details change and are not reproduced here. This page is independent study material and is not affiliated with or endorsed by Fortinet.

What you'll study

Common questions

About FCP preparation

What is the FCP exam format?

It is delivered as multiple-choice questions in a proctored testing environment. The exact number of items, time limit, and whether any labs or simulations appear are set by Fortinet and can change between versions, so check the official certification page and your testing-partner appointment details before exam day.

How hard is the FCP?

Candidates with real FortiGate administration experience usually find it manageable; those who have only read documentation often struggle with policy-order, routing, and VPN troubleshooting scenarios. Difficulty is less about obscure facts and more about applying FortiOS behavior correctly under a described topology. Hands-on lab time is the strongest predictor of comfort.

How long should I study?

Most working administrators need several weeks of focused effort, combining official course material with lab practice. If you already manage FortiGates daily, a shorter review of weak domains may suffice. Build a study plan around the published domain weights and spend extra time on routing, VPN, and troubleshooting, which reward practical familiarity.

What score do I need to pass, and what does the exam cost?

Fortinet and its authorized testing partner publish the current passing standard, fees, and any regional pricing. Those figures are revised periodically, so this page deliberately omits them. Check the official Fortinet certification site and your testing-partner account for the authoritative numbers before you register.

Can I retake the exam if I fail?

Retakes are generally available, but the waiting period, allowed number of attempts, and any additional fees are governed by Fortinet's certification policy and the testing partner's rules. Review the official policy before scheduling a second attempt, and use your score report to target the domains that cost you the most.

In what order should I study the domains?

Start with Security Fabric fundamentals and firewall policy, since almost every other topic assumes you understand policy matching, NAT, and inspection order. Then cover authentication, VPNs, and web filtering, followed by IPS, routing and SD-WAN, and finally logging, troubleshooting, and high availability, which tie the earlier material together.

What are the most common failure modes?

Weak policy-order reasoning, confusion between flow and proxy inspection, misunderstanding of route lookup versus policy lookup, and shaky VPN phase 1 and phase 2 troubleshooting. Candidates also lose points on SD-WAN rule selection and on reading logs to isolate a fault. Practise diagnosing these in a lab rather than memorizing menus.

Is the FCP the same as the older NSE certifications?

Fortinet restructured its certification program, and the FCP sits within the current framework rather than the retired NSE numbering. If you hold older credentials, check Fortinet's official mapping guidance for how they translate and what, if anything, you need to do to stay current. Do not assume automatic equivalence.

Does this page or my study group make me certified?

No. Only passing the official exam through Fortinet's authorized channels confers the credential. This page is independent study material and is not affiliated with, endorsed by, or sponsored by Fortinet. Always verify requirements, registration steps, and credential validity directly with Fortinet before relying on any third-party summary.