NSE 5 Certified: Security Operations (NSE5SO)

The NSE 5 in Security Operations certification validates your ability to deploy, manage, and monitor Fortinet core security operations products to secure networks and applications. The certification exams cover the day-to-day tasks related to Fortinet security operations devices.

Prerequisites

We recommend this certification for cybersecurity professionals who require the expertise needed to deploy, manage, and analyze Fortinet security operations devices.

To achieve this certification, you must hold the NSE 4 FortiOS certification and pass one of the proctored NSE 5 Security Operations exam within 2 years while the NSE 4 certification is active.

A minimum of 6 months to 1 year of hands-on experience with FortiGate and FortiAnalyzer is recommended.

Recommended training for this certification

Exams

Individuals must pass the corresponding NSE 5 proctored exam. The Fortinet NSE 5 - FortiAnalyzer 7.6 Analyst exam evaluates your knowledge of, and expertise in, FortiAnalyzer.

The exam tests your applied knowledge of FortiAnalyzer analytics, and includes operational scenarios, incident analysis, integration with the Security Fabric, and troubleshooting scenarios.

Exam Details

  • Time allowed: 65 minutes
  • Exam questions: 30–35 questions
  • Scoring: Pass or fail. A score report is available from your Pearson VUE account.
  • Language: English, Japanese
  • Product version: FortiAnalyzer 7.6

Exam Topics

Successful candidates have applied knowledge and skills in the following areas and tasks:

  • Features and concepts
  • Log Analysis
  • SOC operation and automation
  • Reports

Recertification

The awarded certification will be active for 2 years from the date of the second exam.

To renew your NSE 5 in Security Operations certification, complete one of the following:

  • If your NSE 5 in Security Operations certification has expired, you must hold an active NSE 4 FortiOS certification and pass the proctored NSE 5 in Security Operations exams within 2 years of the NSE 4 certification.
  • While your NSE 5 in Security Operations and your NSE 4 FortiOS certifications are still active, you can extend the expiration date by 2 years from the date you complete one of the following requirements:
    • Pass an NSE 5 exam from the Security Operations certification track before the expiration date.
    • Complete the online NSE 5 recertification assessment if:
      • The certification assessment is available for the latest version
      • You passed the proctored exam for a previous version
      • The previous exam was taken within the last 2 years
    • Achieve or renew the NSE 7 certification in the Security Operations track.
    • If you are NSE 7 in Security Operations certified, pass any NSE 8 practical exam.

Passing the NSE 5 Security Operations exam recertifies your NSE 1, NSE 2, NSE 3 certifications if they are still active.

Important: Renewing an NSE 5 certification requires an active NSE 4 certification. If any of the actions above are completed when you do not have an active NSE 4 certification, the NSE 5 certification is not issued until you have an active NSE 4 certification. In this scenario, the NSE 4 certification must be issued within 2 years of the NSE 5 exam. The NSE 5 certification will be issued on the same date as the NSE 4 certification.