More study resources

About this exam

The FCSS Public Cloud Security credential is listed on our exam catalogue as a Fortinet Certified Solution Specialist certification focused on public cloud security, with the alias "FCSS in Public Cloud Security". It is aimed at security engineers, cloud architects, and network security professionals who design, deploy, and operate Fortinet security controls across public cloud environments such as AWS, Microsoft Azure, Google Cloud, and Oracle Cloud. The exam is intended to validate working-level skill rather than introductory knowledge, so candidates usually arrive with FortiGate and FortiOS operational experience plus familiarity with cloud networking constructs such as VPCs, VNets, subnets, and route tables. Coverage is organised into five provisional domains: public cloud security fundamentals and shared responsibility; cloud network security architecture including VPC/VNet segmentation and routing; deploying and managing FortiGate virtual appliances in public clouds; cloud-native protection and posture management (CNAPP); and cloud traffic inspection, automation, and operations. Note that the domain names and the even 20 percent weighting shown here are provisional and have not been confirmed against an official blueprint. Preparation should combine hands-on lab work deploying virtual appliances into cloud tenancies with study of shared responsibility boundaries, cloud routing design, and posture management workflows. No official item count, time limit, passing score, fee, or validity period could be sourced, so all of those fields are reported as null pending an authoritative source.

What you'll study

Common questions

About FCSS Public Cloud Security preparation

How many questions are on the exam and how long do I get?

We cannot state either figure. The official certification page returned a 404 error when retrieved on 2026-11-05, so no item count or time limit could be sourced. Both are reported as null. Confirm them on the official Fortinet certification page or in your training portal before booking.

What is the passing score and the exam fee?

Neither is published in our data. No passing score, fee, or currency figure could be sourced from the official page, which was unavailable at retrieval. Treat any number you see elsewhere as unverified until Fortinet publishes it, and check the official page directly.

What are the exam domains and their weights?

The five domains listed here are provisional: fundamentals and shared responsibility, cloud network security architecture, FortiGate virtual appliance deployment, cloud-native protection and CNAPP, and traffic inspection with automation. The even 20 percent weighting is a placeholder, not an official blueprint figure. Replace both names and weights once the official blueprint is available.

Is the exam hard?

We cannot rate difficulty without an official blueprint or pass rate, and neither is available. A reasonable expectation is that it assumes prior FortiGate and FortiOS fluency, so candidates without hands-on virtual appliance deployment experience in a public cloud will find it harder than those who have built and troubleshot such deployments.

How long is the certification valid, and what is the retake policy?

Both are unknown in our data. No validity period or retake policy could be sourced because the official certification page was unavailable. Check your Fortinet training account or the official certification page for the current recertification rules and any waiting period after a failed attempt.

In what order should I study the five domains?

Start with fundamentals and shared responsibility, since the boundary between provider and customer duties underpins every later decision. Then study VPC/VNet segmentation and routing, because appliance placement and traffic paths depend on it. Follow with FortiGate virtual appliance deployment, then traffic inspection and automation, and finish with CNAPP and posture management.

What are the most common failure modes?

Candidates typically stumble on cloud routing details such as how return paths, source/destination checks, and asymmetric flows affect inspection, and on shared responsibility boundaries where they attribute a control to the wrong party. Weakness in appliance sizing and high availability design across availability zones is another frequent gap.

Do I need hands-on cloud experience to pass?

Strongly recommended. The provisional domains assume you can deploy a virtual appliance into a cloud tenancy, adjust route tables so traffic is steered through it, and verify that inspection actually occurs. Reading alone rarely builds that intuition. Build a small lab in at least one provider and break it deliberately.

Are the practice questions on this page official?

No. This material is original study content written for this platform and is not affiliated with, endorsed by, or sourced from Fortinet. It is not an official question bank. Use it to check your understanding, and treat the official Fortinet documentation and training as the authoritative reference.

Where can I verify the exam details?

The official Fortinet certification page is the authoritative source, but it returned a 404 at retrieval on 2026-11-05. Until it is restored, check the Fortinet Training Institute portal and your account dashboard. Do not rely on third-party summaries for item counts, fees, or domain weights.