Guide · free to read
Studying for NSE 4 (FortiOS 7.6): what Fortinet itself publishes, free and paid
Last checked: 2026-10-26. Course and exam versions are changing right now (see the next section). Every claim below links to the Fortinet page it came from, so check the page before you rely on it.
Most NSE 4 prep advice is someone else’s summary. Fortinet publishes more of its own preparation material than people expect, and it is mostly free. This page lists what exists, what it costs where Fortinet says, and which parts of the FortiOS 7.6 Administration Guide line up with each exam domain.
First, which exam version you are studying for
Fortinet’s NSE 4 exam page currently lists two versions side by side:
- Fortinet NSE 4 - FortiOS 7.6 Administrator, status “Available”: 50–55 questions, 100 minutes, English and Japanese, covering FortiOS 7.6.
- Fortinet NSE 4 - FortiOS 8.0 Administrator, status “Coming Soon”: 50–60 questions, 100 minutes, English, covering FortiOS 8.0.
The domains are the same five, and four of the five bands match. Only “Deployment and system configuration” changes: 20–25% on the 7.6 exam, 25–35% on the 8.0 exam. The question count and languages differ too, as listed above. This page is about the 7.6 exam. Fortinet’s course library already labels the 7.6 self-paced course “OLDER VERSION of course. Newer version available”, with the FortiOS 8.0 course listed as current. Fortinet recommends the course that matches the exam version, so if you are sitting the 7.6 exam, use the 7.6 course and the 7.6.0 Administration Guide, and check that the version number on anything you study matches. If you are already enrolled in a self-paced course that is about to retire, the FAQ says “You will have six months to finish your training” (FAQ).
What the exam page says to prepare with
Under recommended preparation for the 7.6 exam, the exam page lists:
- the “FortiOS 7.6 Administrator” course and its hands-on labs
- the “FortiOS 7.6.0—Administration Guide”
- the “FortiOS 7.6.0—New Features” guide
- Fortinet’s FortiSASE, FortiGate CNF, and public cloud (AWS and Azure) guides
It describes the target candidate as having “1–2 years of experience with networking”, “0–1 year of experience with network security”, and a minimum of 6 months of hands-on experience with FortiGate.
None of this is required. Fortinet’s Training Institute FAQ says: “There are no prerequisites for taking Fortinet certification exams.” The course is recommended, not mandatory.
The Fortinet Training Institute course, and what it costs
Fortinet’s course library lists “FortiOS 7.6 Administrator Self-Paced” as a self-paced course with interactive labs, last updated October 13th, 2025. The course’s own page sits behind a Fortinet account login, so open the library card with that exact name (not the general “FortiOS Administrator” description page, which now describes the 8.0 course).
What Fortinet says about cost, in general:
- Fortinet’s Help Desk says all self-paced lessons in the Library “are open free of charge”, and that “On-demand labs are not included” (How do I register for the free online self-paced training?).
- The Training Institute FAQ makes the same split for this level: NSE 4–7 self-paced courses without hands-on labs are free (FAQ).
- Fortinet’s enrollment steps are: log in to the Training Institute, open the Library, click the course name, click “Enroll Now.” For 7.6, use the library card named “FortiOS 7.6 Administrator Self-Paced”, as above.
The 7.6 course itself is free. We checked the enrollment screen for “FortiOS 7.6 Administrator Self-Paced” on 26 October 2026, and enrolling asked for no payment. The labs are the paid part, below.
Labs are the part you pay for. Fortinet’s Help Desk says “On-demand lab access is available for purchase”, and that if you buy it, the course page gets a lab link and lab guides and completing the labs becomes part of the requirements to complete the course’s learning activities (What is on-demand lab access within self-paced courses?). The lab requirement applies only if you buy the labs. Per the FAQ, you can pay by credit card, “through the self-paced course on the NSE Training Institute portal” (a payment method “available for selected self-paced courses”), or by purchase order through a Fortinet reseller or Fortinet-accredited training center (ATC). Neither page states a price, so this page doesn’t either. Ask the reseller.
Fortinet’s FAQ also says “Instructor-led training with hands-on lab activities is available for everyone to purchase.” Its current public instructor-led course description is for the FortiOS 8.0 course, which lists instructor-led and self-paced formats. Whether a 7.6 instructor-led class is still offered is not stated on any public page we found; confirm it on Fortinet’s schedule or with a reseller. No instructor-led price is stated either.
Fortinet’s own lab options
The exam page names “hands-on labs” as part of the recommended preparation, and the labs Fortinet describes for self-paced learners are the purchasable on-demand labs above. Fortinet’s page sets the experience baseline at a minimum of 6 months of hands-on FortiGate time, which a lab of your own can also provide. Fortinet’s FortiGate VM documentation is in the 7.6.0 Administration Guide’s VM chapter.
One free option is documented there: Permanent trial mode for FortiGate-VM. It is a permanent evaluation license, and its limits matter for exam prep. Fortinet lists: a maximum of one free evaluation copy per FortiCloud account; low encryption operation only; 1 CPU and 2 GB of memory; a maximum of three interfaces, firewall policies, and routes; no FortiCare support; no FortiGuard support; and a maximum of two virtual domains. In our reading, a cap of three policies and routes constrains routing and VPN practice, so treat it as a way to learn the GUI, CLI, and basic policy work, not as a full lab.
Which Administration Guide chapters line up with which domain
The FortiOS 7.6.0 Administration Guide is the document Fortinet’s exam page lists. It is large (20 top-level chapters and about 1,300 topic links in its navigation), and it is organized by product area, not by exam domain. Fortinet does not publish a chapter-by-exam-domain table. The table below is our reading of how they line up, based on the domain names and tasks on the exam page. Check it against the tasks Fortinet lists.
| Exam domain (7.6 band) | Administration Guide chapters to start with |
|---|---|
| Content inspection (25–30%) | Security Profiles |
| Deployment and system configuration (20–25%) | Getting started, System (HA lives here), Log and Report, Troubleshooting, VM |
| Firewall policies and authentication (20–25%) | Policy and Objects, User & Authentication |
| Routing (10–15%) | Network (static routing), SD-WAN |
| VPNs (10–15%) | IPsec VPN |
Three gaps in the table, so it does not look cleaner than it is: DHCP server tasks (Deployment) are under Network, which the table lists only for Routing; “Inspection modes for firewall policies” (Firewall) is under Security Profiles; and FortiAnalyzer registration is also covered in the Fortinet Security Fabric chapter as well as Log and Report.
Three notes on using it:
- FortiSASE and Cloud-Native Firewall appear on the exam page under the deployment domain’s tasks and have their own separate Fortinet guides, which the exam page lists alongside the Administration Guide. They are not chapters of the Administration Guide.
- The Administration Guide has chapters the NSE 4 exam page doesn’t map to a domain: for example Wireless configuration, Switch Controller, WAN optimization, and Hyperscale firewall. Reading them is fine, but do it after the five above. We don’t read any of them as exam domains, and the exam page lists no task for them. Verify against the task list before skipping anything.
- “New Features” is a separate guide. The exam page lists “FortiOS 7.6.0—New Features” as its own item in the recommended preparation, so read it alongside the chapters.
For what each domain’s tasks actually ask of you, see our domain-by-domain NSE 4 blueprint breakdown.
About the exam itself
From the exam page: 50–55 questions, 100 minutes, English and Japanese, covering FortiOS 7.6. Fortinet’s page lists no price and no alphanumeric exam code (booking sites may list the exam under their own code). The page also has an “Exam Sample Questions” section: “A set of sample questions is available from the Fortinet Training Institute”, attached to a course there. Look at that before anything else. For fee, booking, retake and validity details, with Fortinet’s sources linked, see what the NSE 4 exam costs and how to book it.
Tell me when these questions change
FortiOS changes, and so does this bank. Leave an address and you will get one email when the questions are updated for a new release. Nothing else is sent, and a reply saying stop removes you.
Check where you stand
If you want to see which domains need work before you commit study hours, there is a free 15-question sample, drawn from our 191-question NSE 4 bank, at /sample.