NSE5 Exam Syllabus: Study Roadmap (Part 1 of 10)
NSE5 Exam Syllabus: Study Roadmap (Part 1 of 10)
This is the opening post in a study series for the Fortinet NSE 5 certification — specifically the FortiManager Administrator track, now branded FCP — FortiManager Administrator under the Fortinet Certified Professional programme. The format mirrors the NSE4 series I wrote earlier this month: ten parts, each one or two official lessons, GUI path, equivalent CLI, and the diagnostic output that comes up under exam pressure. This first post fixes the scope.
Why FortiManager and not FortiAnalyzer
The NSE 5 designation historically covered three separate exams — FortiManager, FortiAnalyzer, and FortiClient EMS. Under the FCP rebrand they’re separately bookable but still group as the “associate” tier. This series targets FortiManager because the operational depth there is greater and because most networks that run a FortiAnalyzer also run a FortiManager — the FAZ-only practitioner is rare in the field.
If your role is log analytics first and policy management second, the FortiAnalyzer exam is the one to sit instead. Most of the architecture (ADOMs, HA, FortiGuard distribution) overlaps closely enough that this series will still be useful background.
Who the exam is for
NSE 5 is aimed at the engineer who operates central management for a FortiGate fleet — registers devices, builds policy packages, runs install previews, troubleshoots a failed install, manages firmware rollouts, owns the FortiGuard mirror. If your day job involves more than two or three FortiGates, this is the certification that says you know how to keep them in sync.
Recommended prerequisite is the NSE 4 (FortiGate Administrator) certification or roughly equivalent hands-on time. The exam assumes you already understand FortiGate policy lookup, NAT, and routing — it tests how you orchestrate those across many devices.
Exam logistics
| Item | Detail |
|---|---|
| Current exam code | FCP_FMG_AD-7.4 (FortiManager 7.4) |
| Format | Multiple choice, single and multiple answer |
| Questions | 35 |
| Duration | 60 minutes |
| Delivery | Pearson VUE — test centre or online proctored |
| Passing score | Not published (scaled scoring) |
| Validity | 2 years |
| Recommended prep | FortiManager Administrator self-paced course on the Fortinet Training Institute |
The free self-paced course on training.fortinet.com is the canonical source. Lecture videos and the official study guide PDF are free; labs are gated behind a paid voucher but are not strictly required to pass — a self-built lab covers the same ground. The FortiManager lab series I wrote on Proxmox earlier is enough hardware to practise every topic on the exam.
The official curriculum, grouped
The course is split into ten or eleven lessons depending on which release you download. Treated by what you actually do at the keyboard, they cluster into seven topic buckets:
Foundations
- Introduction & Initial Configuration — system settings, network, FortiGuard, admin access.
- High Availability — primary/secondary roles, config sync, manual vs automatic failover.
Multi-tenancy
- Administrative Domains (ADOMs) — normal vs advanced ADOMs, modes, RBAC scope.
Device lifecycle
- Device Registration & Provisioning — adding FortiGates, ZTP, model devices, install operations.
- Device-Level Configuration & Templates — provisioning templates, CLI templates, SD-WAN, IPsec, and certificate templates.
Policy management
- Policy & Objects (ADOM-level configuration) — policy packages, dynamic objects, install previews, install logs.
- Workflow & Workspace Mode — locking, approvals, revision history.
Operations
- Diagnostics & Troubleshooting —
diagnosecommands, FGFM tunnel, install logs, oftpd. - Advanced Features — FortiGuard distribution, scripting, SSO, fabric authorisation.
- FortiAnalyzer integration & SOC features (light coverage on the FortiManager exam).
How I’d suggest using this series
If you’re sitting the exam, work through Parts 2–10 in order — they build on each other (e.g., policy packages in Part 7 assume you already understand ADOMs from Part 4 and device registration from Part 5). If you’re using the series as a reference at work, jump to whichever bucket is biting you that day; each post is self-contained.
A few habits that paid off when I prepared:
- Build a lab. A single FortiManager VM and two FortiGate VMs is enough to reproduce every topic on the exam. The five-part FortiManager Lab on Proxmox series covers building exactly that.
- Drive both the GUI and the CLI. FortiManager has a far bigger CLI surface than most people realise (
config system ...,diagnose dvm ...,diagnose test deploymanager ...). Exam questions will hand you CLI output and ask what’s broken; if you only ever clicked through the GUI, you’ll guess. - Read every install log. The single biggest source of FortiManager mistakes — in the exam and in production — is reading an install preview wrong. Train yourself to scroll through the entire diff before clicking Install.
- Snapshot before every change. A FortiManager has a forgiving revision system, but the underlying VM snapshot is faster and lets you experiment without paying for it later.