ExamFinch.com My Study

Cheat sheet

Fortinet NSE 4 Cheat Sheet

Practice this exam

Deployment and system configuration

  • 20-25% of exam
  • Initial configuration Log settings FGCP HA cluster Resource and connectivity troubleshooting FortiGate cloud and VMs FortiSASE

Firewall policies and authentication

  • 20-25% of exam
  • Firewall policies SNAT and DNAT Authentication methods FSSO

Content inspection

  • 25-30% of exam
  • Encrypted traffic certificates Web filtering Application control Antivirus IPS

Routing

  • 10-15% of exam
  • Static routing Routing table Route redundancy and load balancing SD-WAN

VPNs

  • 10-15% of exam
  • Meshed IPsec VPN IPsec VPN concepts IPsec VPN wizard Redundant VPN IPsec VPN issues

Quick Facts

  • Exam NSE 4 - FortiOS 7.6 Administrator
  • Credential NSE 4 FortiOS Administrator
  • Questions 50-55 questions
  • Time 100 minutes
  • Pass Pass or fail
  • Language English and Japanese
  • Valid 2 years
  • Provider Pearson VUE
  • July 15 mapping FortiGate Administrator to NSE 4

Exam Logistics DE

  • 100 minutes, 50-55 questions, pass or fail
  • 100 minutes 50-55 questions Pass or fail Score report in Pearson VUE

Deployment vs Firewall DE

Deployment and system configuration

  • 20-25% weight
  • HA, logs, troubleshooting
  • Cloud and FortiSASE topics

Firewall policies and authentication

  • 20-25% weight
  • Policies, NAT, authentication
  • FSSO topics
  • Same weight range

Topic to Exam Area DE

  • FGCP HA cluster questions → Deployment and system configuration ( 20-25% )
  • Diagnose resource or connectivity issues → Deployment and system configuration ( 20-25% )
  • FortiSASE onboarding and administration → Deployment and system configuration ( 20-25% )
  • SNAT or DNAT in firewall policies → Firewall policies and authentication ( 20-25% )
  • FSSO, LDAP, or RADIUS authentication → Firewall policies and authentication ( 20-25% )
  • Certificates for encrypted traffic → Content inspection ( 25-30% )
  • Web filter, antivirus, IPS, app control → Content inspection ( 25-30% )
  • Static routes or SD-WAN → Routing ( 10-15% )
  • IPsec VPN → VPNs ( 10-15% )

Initial configuration DE

  • FortiGate factory default settings Initial configuration task
  • FortiGuard licenses Initial configuration task
  • FortiGate administrative access Initial configuration task
  • FortiGate as a DHCP server Initial configuration task
  • Configuration file backup and restore Initial configuration task
  • FortiGate firmware upgrades Initial configuration task

July 15 Mapping DE

  • FortiGate Administrator maps to NSE 4 FortiOS Administrator
  • FortiGate Administrator NSE 4 FortiOS Administrator Exams passed from July 15, 2024 New cert July 15, 2026

Exam Logistics DE

  • Exam length → 100 minutes
  • Number of questions → 50-55 questions
  • Scoring → Pass or fail
  • Score report location → Pearson VUE account
  • Certification validity → 2 years
  • Exam language → English and Japanese
  • Exam product version → FortiOS 7.6.0
  • Exam delivery provider → Pearson VUE

Logs and FortiAnalyzer DE

  • Log workflow Log configuration task
  • Log storage options Log configuration task
  • Device registration on FortiAnalyzer Log configuration task
  • Log message viewing and searching Log configuration task

FGCP HA cluster DE

  • FortiGate HA HA cluster task
  • HA setting modifications HA cluster task
  • Session synchronization for seamless failover HA cluster task
  • HA management interface HA cluster task
  • Typical operation of an HA cluster HA cluster task
  • HA cluster firmware upgrade HA cluster task

Diagnostics and troubleshooting DE

  • Abnormal behavior monitoring Resource and connectivity task
  • Physical and network layer problems Resource and connectivity task
  • Connectivity problems: sniffer and debug flow Resource and connectivity task
  • Resource problems: high CPU and memory Resource and connectivity task
  • Memory conserve mode Resource and connectivity task
  • Troubleshooting use cases Resource and connectivity task

Public cloud and FortiSASE DE

  • Public cloud threats and challenges Cloud and SASE task
  • Fortinet public cloud solutions Cloud and SASE task
  • FortiGate VMs in the cloud Cloud and SASE task
  • FortiGate CNF Cloud and SASE task
  • Challenges with remote work Cloud and SASE task
  • SASE architecture Cloud and SASE task
  • FortiSASE components Cloud and SASE task
  • FortiSASE security features Cloud and SASE task
  • FortiSASE client onboarding Cloud and SASE task
  • FortiSASE use cases Cloud and SASE task

FSSO vs Active or Passive Authentication FI

Active and/or passive authentication

  • Firewall user monitoring on GUI
  • Remote LDAP or RADIUS server

FSSO

  • DC agent mode
  • Collector agent
  • Listed as separate topics

Firewall policies and NAT FI

  • Firewall policies Policy and NAT task
  • Inspection modes for firewall policies Policy and NAT task
  • Firewall policy traffic logs Policy and NAT task
  • SNAT configuration Policy and NAT task
  • DNAT using virtual IP addresses Policy and NAT task

Authentication and FSSO FI

  • Remote LDAP authentication server Authentication task
  • Remote RADIUS authentication server Authentication task
  • Active and/or passive authentication Authentication task
  • Firewall user monitoring on the GUI Authentication task
  • FSSO in DC agent mode Authentication task
  • Collector agent Authentication task
  • FSSO login issues Authentication task

Exam Weights IN

  • Content inspection is the largest weight, 25-30%
  • Content 25-30% Deployment 20-25% Firewall 20-25% Routing 10-15% VPNs 10-15%

Content Inspection vs Routing IN

Content inspection

  • 25-30% weight
  • Largest weight range
  • Flow or proxy modes

Routing

  • 10-15% weight
  • Static routes and SD-WAN
  • Smaller weight range
  • Largest vs smaller area

Certificates and encrypted traffic IN

  • Outbound full SSL/SSH inspection Certificate inspection task
  • Private CA certificates on endpoints Certificate inspection task
  • Certificate issues Certificate inspection task
  • Certificate inspection for web filtering Certificate inspection task

Web Filter vs Antivirus IN

Web filtering

  • FortiGuard categories
  • URL filters
  • Web filtering issues

Antivirus

  • Flow and proxy profiles
  • Protocol options
  • Events: log and monitor
  • Both content inspection areas

Web filtering IN

  • Inspection mode: flow or proxy Web filtering task
  • Web filter profiles by inspection mode Web filtering task
  • FortiGuard categories Web filtering task
  • URL filters Web filtering task
  • Web filtering issues Web filtering task

Full SSL vs Certificate Inspection IN

Full SSL/SSH inspection

  • Outbound traffic
  • Private CA certificates on endpoints

Certificate inspection

  • Web filtering use
  • Certificate issues topic
  • Listed as separate topics

Application control, antivirus and IPS IN

  • Application control in profile mode Security profile task
  • Application control event monitoring Security profile task
  • Traffic matching with application control issues Security profile task
  • Antivirus profiles by inspection mode Security profile task
  • Antivirus protocol options Security profile task
  • Antivirus events: log and monitor Security profile task
  • Common antivirus issues Security profile task
  • IPS sensors Security profile task
  • IPS high-CPU usage issues Security profile task
  • Blocking known exploits Security profile task

Routing vs VPNs RO

Routing

  • 10-15% weight
  • Static routing and SD-WAN

VPNs

  • 10-15% weight
  • IPsec VPN topics
  • Same weight range

Static routing and SD-WAN RO

  • Static routing Routing task
  • Routing table on FortiGate Routing task
  • Route redundancy and load balancing Routing task
  • SD-WAN concepts Routing task
  • Main use cases for SD-WAN Routing task
  • SD-WAN on FortiGate Routing task
  • Routing in an SD-WAN context Routing task
  • SD-WAN behavior, link usage, quality Routing task

IPsec VPN VP

  • Meshed or partially redundant IPsec VPN IPsec VPN task
  • IPsec VPN concepts IPsec VPN task
  • IPsec VPN using the IPsec wizard IPsec VPN task
  • Redundant VPN between two FortiGates IPsec VPN task
  • IPsec VPNs and log review IPsec VPN task
  • IPsec VPN issues IPsec VPN task

Common Traps

FortiOS 7.6 vs 8.0

  • This sheet covers FortiOS 7.6.0 ≠ 8.0 exam listed as Coming Soon

Question count is a range

  • The exam page lists 50-55 questions ≠ Not one fixed number

Scoring is pass or fail

  • Fortinet reports pass or fail ≠ Score report: Pearson VUE account

Weights are ranges

  • Each area lists a percentage range ≠ Ranges do not total 100

Certification validity

  • Certifications expire two years after earning ≠ Dates follow the latest exam passed

Last Minute

  • 1. 100 minutes for 50-55 questions
  • 2. Scoring is pass or fail
  • 3. Content inspection 25-30%: largest area
  • 4. Deployment and Firewall each 20-25%
  • 5. Routing and VPNs each 10-15%
  • 6. Certification valid two years
  • 7. FortiGate Administrator maps to NSE 4
  • 8. Exam version: FortiOS 7.6.0
  • 9. FortiOS 8.0 exam: Coming Soon
  • 10. Experience: 6 months hands-on FortiGate minimum

Fortinet NSE 4 Network Security Professional

  • Practice Questions 177 questions Study Guide 19 topics Cheat Sheet 77 facts Flashcards 50 cards Videos 1 video Blogs 1 blog Free CE Podcast