Guides
These are free to read, with nothing to sign in to. They are written the same way the practice questions are: from the vendor’s own published documentation and exam descriptions — Fortinet’s for the NSE guides, Cisco’s for CCNA — with the source linked so you can open it and check the claim yourself. If one of them is wrong, tell us and it gets corrected.
Studying for CCNA? Start with what changes on 3 February 2027, when Cisco moves the 200-301 exam from v1.1 to v2.0.
NSE4_FGT_AD-7.6
What each of the five blueprint domains actually asks of you, how to turn Fortinet’s published weight bands into a study-time budget that adds up, and which Fortinet document to read for each domain. Includes why the widely repeated pass mark for this exam is an estimate and not a published number.
FCP_FAZ_AN-7.6
What each of the four blueprint domains asks of you, and which Fortinet document to read for each. Fortinet publishes no domain weightings at all for this exam — the study-time split in this guide is ours, and it says so.
NSE6_FMG_AD-7.6
All five domains, what each one tests, and why the published weight bands for this exam have midpoints summing to 115% — so a study-time budget that adds up has to pick a number inside each band, and say whose number it is.
NSE4_FGT_AD-7.6
What a FortiGate can actually see in each mode, why antivirus and IPS do nothing under certificate inspection, where the certificate warnings under full inspection come from and the only two supported ways to stop them, and how the inbound protect-a-server case is the mirror image of all of it.
NSE4_FGT_AD-7.6
A working set of CLI commands organized by what you are trying to figure out, not alphabetically: resource exhaustion and conserve mode, packet capture and debug flow, why SD-WAN picked the link it did, and which command tells you whether an IPsec tunnel failed at phase 1 or phase 2.
NSE4_FGT_AD-7.6
The ordered criteria FGCP uses to pick a primary unit, what the HA override setting changes about that order and why that convenience has a cost, the heartbeat defaults that decide how fast a dead unit gets noticed, and the five distinct conditions that actually trigger a failover.
NSE4_FGT_AD-7.6
What phase 1 actually establishes and what phase 2 builds on top of it, why the two proposal lists do not have to match, how phase 2 selectors differ from the firewall policy people confuse them with, and what a tunnel’s failure mode tells you about which phase to look at.
NSE4_FGT_AD-7.6
The logistics rather than the material: what the exam costs, the two ways to pay for it, how booking and canceling work, what happens if you don’t pass the first time, and how long the certification is good for — sourced to Fortinet’s own documentation.
200-301
The dates Cisco has published, both versions’ domain tables side by side, and a topic-by-topic reading of the two exam-topics PDFs: what has no clear v2.0 counterpart, what carries over, and what is new. Cisco publishes no change list of its own, and the guide says plainly which parts are its own reading.
Most practice-exam sellers will not tell you where their material came from. We publish the method in full on the methodology page, and these guides are the same thing in a different shape: the working shown, in public, before you have paid anything. If the free material is accurate and cited, that is the strongest evidence we can offer that the paid material is too.
There is more of this coming, one guide at a time, as each is checked against the vendor’s own primary source. We would rather publish one guide that is right than five that are quick.
Next, if you want to see the questions themselves: fifteen NSE 4 questions, scored by blueprint domain, in the free readiness assessment — no account, nothing recorded — or five CCNA questions in the free CCNA check. Or the catalog and prices.