Fortinet NSE 5 study guide
Fortinet NSE 5 · Work through your exam, one topic at a time.
The Fortinet NSE 5 designation sits in the middle of Fortinet's Network Security Expert (NSE) certification ladder, above the entry-level NSE 1–3 awareness and fundamentals tiers and below the advanced NSE 6 and NSE 7 specialist levels. It is aimed at network and security professionals who already understand basic firewall concepts and now need to operate FortiGate equipment day to day - security administrators, network engineers, and managed-service staff who deploy, configure, and troubleshoot FortiGate devices in production. Because the official certification page could not be retrieved at the time of writing, this page cannot state the current number of questions, time limit, passing score, exam fee, retake rules, or validity period. Treat every such figure you find elsewhere as unverified until you confirm it against Fortinet's own training and certification pages. Topics on this exam: FortiGate Security and FortiGate Infrastructure. The Fortinet NSE 5 study guide has 2 sections and about 851 words.
01FortiGate Security
The FortiGate Security domain tests how you enforce policy, translate addresses, authenticate users, and attach inspection profiles on a FortiGate running FortiOS. Questions focus on correct policy design and the order in which the FortiGate evaluates and inspects traffic. Firewall policies are evaluated top-down; the first matching policy is applied and evaluation stops. A policy matches on ingress interface, source address/user, destination address, service, schedule, and action.
437 words, about 2 min02FortiGate Infrastructure
The FortiGate Infrastructure domain tests the forwarding and high-availability layer: routing decisions, interface types, virtual domains, and FortiGate Clustering Protocol (FGCP) behavior. Expect questions that ask why a packet took a particular path or why a cluster failed over. The FortiGate uses longest-prefix match in the routing table; administrative distance and priority break ties. Policy routes are checked before the routing table for matching traffic and can override the destination interface or gateway.
414 words, about 2 min