Free Fortinet NSE 1 (FCF) Practice Test 2026
200 original questions on all ten modules of Fortinet's NSE 1 course, the course that replaced FCF. Tuned for mobile. Free to start, no account needed.
Train on mobile
Test on desktop
The NSE 1 (FCF) exam at a glance
Fortinet NSE 1 in Cybersecurity is Fortinet's entry-level certification, and since July 15, 2026 it replaces Fortinet Certified Fundamentals (FCF) in Cybersecurity; people with an active FCF were awarded NSE 1 and NSE 2. To earn it you pass the online exam presented at the end of the free self-paced course Cybersecurity and Cloud Fundamentals on the Fortinet Training Institute, which Fortinet estimates at about 11 hours. The course has ten modules: Intro to Cybersecurity, Threat Landscape, Social Engineering, Malware, Cryptography and the Public Key Infrastructure, Secure Networking, Authentication and Access Control, Endpoint Security, Secure Data and Applications, and Cloud Security and Virtualization. Fortinet does not publish a question count, time limit or pass mark. The certification is active for two years.
Tigertest has 200 NSE 1 (FCF) practice questions with explanations, free to start with no account required.
- Replaces
- Fortinet Certified Fundamentals (FCF) in Cybersecurity, from July 15, 2026
- How to earn it
- Pass the online exam at the end of the Cybersecurity and Cloud Fundamentals course
- Course
- Free, self-paced, about 11 hours, ten modules
- Questions, time and pass mark
- Not published by Fortinet
- Valid for
- Two years
- Given by
- Fortinet Training Institute
Updated by the Tigertest team. Practice questions follow Fortinet's NSE Certification Program Updates 2026 page, the Training Institute NSE 1 and FCF certification pages and the Cybersecurity and Cloud Fundamentals course page, checked November 2026. Exam rules change, so confirm current details with Fortinet Training Institute: NSE 1 in Cybersecurity.
How It Works
Seven Drills
Security basics and threats, social engineering and malware, cryptography, secure networking, authentication and access, endpoint security, and data, apps and cloud. Questions you miss come back until you have mastered them.
Practice Tests
Two 40-question tests in 60 minutes with flagging and review, four questions from every course module. Practice Test 2 is held out of the drills, so it measures readiness.
Built on the NSE 1 Course Agenda
Fortinet lists ten modules for Cybersecurity and Cloud Fundamentals but no weights, so every practice test asks four questions from each module.
Help Make Tigertest Better
Have an idea, a topic you'd like covered, or a question that could be clearer? We read every message and use it to improve every test.
Share FeedbackHow to Pass Fortinet NSE 1
1. Take the free course first
The NSE 1 exam comes at the end of Fortinet's free Cybersecurity and Cloud Fundamentals course on the Fortinet Training Institute. Work through every module; the practice tests here check that the ideas stuck.
2. Learn the terms in pairs
Many questions turn on telling two close ideas apart: integrity and confidentiality, a worm and a trojan, an IDS and an IPS, authentication and authorization, symmetric and asymmetric keys, IaaS and SaaS. Know what each one does that the other does not.
3. Think like the attacker, then the defender
For each threat, from phishing to ransomware, know how it gets in and which control stops it: training and MFA, patching, backups, segmentation, encryption or a firewall rule.
4. Drill your weak module, then sit a full test
Tigertest tracks your accuracy by module. Retake the drill you miss most until you clear 80 percent, then take Practice Test 2 cold.
Fortinet NSE 1 Frequently Asked Questions
What happened to the Fortinet FCF certification?
On July 15, 2026 Fortinet moved its NSE program from five levels to eight. Fortinet Certified Fundamentals (FCF) in Cybersecurity was replaced by NSE 1 in Cybersecurity, and people with an active FCF were awarded NSE 1 and NSE 2. The new NSE 1 course, Cybersecurity and Cloud Fundamentals, covers the same ground as the old FCF courses.
How do I earn Fortinet NSE 1?
Take the free self-paced Cybersecurity and Cloud Fundamentals course on the Fortinet Training Institute and pass the online exam presented at the end of the course. Fortinet says the course takes about 11 hours. The certification is active for two years.
How many questions are on the NSE 1 exam, and what is the pass mark?
Fortinet does not publish a question count, time limit or pass mark for the NSE 1 online exam. Each Tigertest practice test is 40 questions in 60 minutes, and the 80 percent goal is our own readiness line, not Fortinet's.
What does the NSE 1 course cover?
Ten modules: Intro to Cybersecurity, Threat Landscape, Social Engineering, Malware, Cryptography and the Public Key Infrastructure, Secure Networking, Authentication and Access Control, Endpoint Security, Secure Data and Applications, and Cloud Security and Virtualization. Every Tigertest practice test asks four questions from each.
Is this practice test free?
It is free to start, with no account required. Practice Test 1 and every drill but the last are free; the last drill and the final practice test are part of Tigertest Premium, one payment with no subscription. Tigertest is not affiliated with Fortinet.
NSE 1 (FCF) sample questions and answers
6 of the 200 practice questions, one from each topic, with the answer explained.
- 1.
A company puts up a sign warning that the server room is under video surveillance. Which type of control is the sign?
- A.
Corrective
- B.
Deterrent
- C.
Recovery
- D.
Compensating
Answer: B.A deterrent control discourages someone from trying an attack. A corrective control fixes things after an incident has happened.
- A.
- 2.
In ransomware as a service, what does the ransomware developer usually provide to affiliates?
- A.
Stolen goods to resell
- B.
The victims' backup copies
- C.
The malware and payment tools
- D.
Fake job adverts to attract victims
Answer: C.Ransomware as a service lets affiliates rent the malware, leak sites and payment infrastructure, and the developer takes a share of each ransom.
- A.
- 3.
Which feature of an email is a common sign of a phishing attempt?
- A.
A greeting that uses your title
- B.
A logo in the email header
- C.
Pressure to act right away
- D.
A message sent during work hours
Answer: C.Phishing often creates urgency, such as an account closing today, so the reader acts before thinking. Logos and titles are easy to copy and prove nothing.
- A.
- 4.
Why can signature-based antivirus miss brand-new malware?
- A.
It scans only the system memory
- B.
It only matches known patterns
- C.
It needs a user to approve each scan
- D.
It works only on email attachments
Answer: B.Signatures describe malware that has already been analyzed. New or changed samples have no signature yet, which is why behavior analysis and sandboxing are added.
- A.
- 5.
What does a certificate authority do?
- A.
Stores every user's private key
- B.
Issues passwords for websites
- C.
Signs certificates for keys
- D.
Encrypts all traffic on the internet
Answer: C.A certificate authority checks an identity and signs a certificate linking it to a public key. Browsers trust the certificate because they trust the CA's signature.
- A.
- 6.
Which device is built to protect a web application from attacks such as SQL injection in HTTP requests?
- A.
A network access control system
- B.
A Wi-Fi access point
- C.
A web application firewall
- D.
A secure email gateway
Answer: C.A web application firewall inspects HTTP and HTTPS traffic to a web application and blocks attacks against it, such as injection and cross-site scripting.
- A.
Related practice tests
Every test on Tigertest is free to start, with no account needed.
Ready for NSE 1?
Start for free. No account required. 200 questions across all ten modules.
Start practicing