Fortinet OT Security Architect exam-day guide
Fortinet OT Security Architect · Prepare for the day ahead.
Your checklist
Government-issued photo ID
Bring the same ID document whose name matches your registration exactly. If your registration name differs from your ID (for example, a shortened first name or a maiden name), contact the provider before test day to correct it. Confirm the accepted ID types and any secondary-ID requirement with the provider.
Appointment confirmation and candidate ID number
Keep the confirmation email or portal screenshot showing your appointment time, test-center address or remote-proctoring link, and your candidate/registration number. You may be asked for the candidate number at check-in, so have it accessible without searching.
Know your delivery format and testing location
Confirm whether you sit the exam at a test center or via remote proctoring. For a test center, plan the route and parking; for remote delivery, confirm the software, webcam, microphone, and system check have passed. Delivery rules differ, so verify the specifics with the provider.
Review the official exam blueprint and weightings
Pull the current exam description from the certification provider and note the domain weightings. Use it to decide where to spend the final 72 hours. Do not rely on third-party summaries that may be outdated; the provider's blueprint is authoritative.
Consolidate your own notes on Fortinet OT security topics
Bring (or have open for remote delivery, if permitted) one or two pages of your own condensed notes: FortiGate policy and NAT logic, FortiDeceptor deception concepts, FortiNAC visibility and control, FortiSIEM correlation, FortiEDR/EPP behavior, and the Purdue model and IEC 62443 zoning concepts. Writing the sheet is itself useful revision. Confirm with the provider whether any reference material is allowed during the exam.
Practice the OT scenario reasoning you will be tested on
The exam is scenario-heavy: segmentation between IT and OT zones, conduit design, passive versus active asset discovery, protocol-aware inspection for Modbus, DNP3, and OPC, and incident response in a plant where uptime outranks confidentiality. Rehearse explaining trade-offs aloud; it exposes gaps quickly.
Prepare a time-allocation plan
Note the total question count and time limit from the provider's exam description, then compute a per-question budget with a buffer for flagged items. Decide in advance how many minutes you will allow before flagging and moving on.
Arrange a quiet, compliant environment (remote delivery)
If testing remotely, clear the desk, remove phones and smart watches, close other applications, and test the camera and microphone the day before. Room and desk rules vary, so confirm the permitted items and room-scan procedure with the provider.
Plan breaks, food, and medication
Scheduled and unscheduled break rules depend on the delivery format and provider. Confirm in advance whether breaks are allowed, whether the clock stops, and what re-entry requires. Bring water and any medication you may need; test centers often restrict food and drink at the desk.
Scratch paper and pen policy
Many providers supply an erasable notebook or permit scratch paper, but policies differ and some remote sessions prohibit it. Confirm the allowed materials with the provider rather than assuming, and do not bring your own if it is not permitted.
Confirm scoring and retake policy
Check the passing score, score-report timing, and retake waiting period on the provider's site. Knowing whether results are immediate or delayed prevents unnecessary stress. Treat any specific number you have not verified as unconfirmed.
Backup plan for technology failure
For remote delivery, know the provider's support number and have a phone with data as a fallback. If the session drops, note the time and any case number. Confirm the provider's incident and rescheduling process beforehand.
Plan the day
Switch from broad study to targeted review. Re-read the provider's exam blueprint and map each domain to your weakest areas. Spend the bulk of the time on scenario practice: IT/OT segmentation, zone-and-conduit design, secure remote access to plant assets, and detection and response where availability is the top priority. Re-read your own condensed notes rather than new material. Confirm appointment logistics, ID, and delivery format. Protect sleep; do not attempt an all-night cram, because scenario questions reward clear reasoning more than recall.
Do a light pass only: skim your one-page summary, review Fortinet product roles and the Purdue model, and re-check the time budget. Complete any system or room check for remote delivery, charge devices, and print or save the confirmation. Prepare the ID and any permitted materials in one place. Confirm the start time in your local time zone, accounting for any difference from the provider's stated zone. Stop studying early enough to sleep a full night.
Eat a normal meal and arrive or log in early, allowing margin for check-in. For a test center, bring your ID and confirmation; for remote delivery, close background applications, silence phones, and complete the room scan as instructed. Do a two-minute breathing exercise and remind yourself of your time budget and flag-and-move-on rule. Avoid last-minute discussion of exam content with others, which tends to create doubt rather than clarity.
Read each question fully, including qualifiers such as 'best', 'first', or 'most likely'. For scenario items, identify the constraint first: safety, uptime, or confidentiality. Answer confident questions quickly, flag long scenarios, and return to them after clearing the easy items. Watch the clock against your per-question budget. For multiple-response items, count the selections required. If a question is genuinely unknown, eliminate clearly wrong options and choose the best remaining answer; there is usually no penalty for guessing, but confirm the scoring rule with the provider. Leave time to review flagged items and confirm submission.
Rules to check
Bring a valid government-issued photo ID whose name matches your registration. If it does not match, resolve the discrepancy with the provider before test day; do not assume an alternative document will be accepted.
Follow all proctor instructions, whether on-site or remote. Do not communicate with anyone other than the proctor during the session, and do not attempt to capture, copy, or share exam content. Doing so typically violates the certification agreement and can void your result.
Do not use unauthorized materials, devices, or assistance. Whether notes, calculators, or scratch paper are permitted depends on the provider and delivery format, so confirm the allowed-items list in advance rather than bringing items on assumption.
Break rules vary by delivery format and provider. Confirm whether breaks are permitted, whether the clock continues, and what re-entry requires. Do not leave the camera view or testing room during a remote session unless the proctor has approved it.
Scoring and passing standards are set by the provider and may be reported on a scaled score. Do not rely on a passing score or question count you have not verified; check the current exam description. Treat any figure you cannot confirm as unverified.
Retake and rescheduling policies, including waiting periods and fees, are provider-specific. Confirm them before the exam so that a poor result or a technical failure does not catch you unprepared. Record any support case number if a session fails.
Report any technical problem or rule ambiguity to the proctor or provider support immediately rather than improvising a workaround. Documenting the issue at the time is what supports a later appeal or reschedule.
Keep the certification agreement and exam-day communications. If you are unsure about any conduct question, ask the provider before the exam rather than guessing; uncertainty about a specific policy should be resolved with the provider, not inferred.