NSE7_OTS-6.4 Fortinet NSE 7-OT Security 6.4 Training Material

dumps2021-12-31T03:15:29+08:00

Fortinet NSE 7-OT Security 6.4 NSE7_OTS-6.4 exam is easy for you to pass now. The online Fortinet certification NSE7_OTS-6.4 training material is valuable. There are 35 questions in real Fortinet NSE7_OTS-6.4 exam, and you have 60 minutes to take the test. The pass or fail result will be available immediately after taking the test. The available language is English. Free Fortinet NSE7_OTS-6.4 exam training material is available below.

Page 1 of 2

1. Refer to the exhibit, which shows a non-protected OT environment.

An administrator needs to implement proper protection on the OT network.

Which three steps should an administrator take to protect the OT network? (Choose three.)

Deploy an edge FortiGate between the internet and an OT network as a one-arm sniffer.

Deploy a FortiGate device within each ICS network.

Configure firewall policies with web filter to protect the different ICS networks.

Configure firewall policies with industrial protocol sensors

Use segmentation

2. What can be assigned using network access control policies?

Layer 3 polling intervals

FortiNAC device polling methods

Logical networks

Profiling rules

3. In a wireless network integration, how does FortiNAC obtain connecting MAC address information?

RADIUS

Link traps

End station traffic monitoring

MAC notification traps

4. An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.

Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

You must set correct operator in event handler to trigger an event.

You can automate SOC tasks through playbooks.

Each playbook can include multiple triggers.

You cannot use Windows and Linux hosts security events with FortiSo

5. Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)

Services defined in the firewall policy.

Source defined as internet services in the firewall policy

Lowest to highest policy ID number

Destination defined as internet services in the firewall policy

Highest to lowest priority defined in the firewall policy

6. An OT administrator configured and ran a default application risk and control report in FortiAnalyzer to learn more about the key application crossing the network. However, the report output is empty despite the fact that some related real-time and historical logs are visible in the FortiAnalyzer.

What are two possible reasons why the report output was empty? (Choose two.)

The administrator selected the wrong logs to be indexed in FortiAnalyzer.

The administrator selected the wrong time period for the report.

The administrator selected the wrong devices in the Devices section.

The administrator selected the wrong hcache table for the report.

7. What two advantages does FortiNAC provide in the OT network? (Choose two.)

It can be used for IoT device detection.

It can be used for industrial intrusion detection and prevention.

It can be used for network micro-segmentation.

It can be used for device profiling.

8. Refer to the exhibit

In the topology shown in the exhibit, both PLCs can communicate directly with each other, without going through the firewall.

Which statement about the topology is true?

PLCs use IEEE802.1Q protocol to communicate each other.

An administrator can create firewall policies in the switch to secure between PLCs.

This integration solution expands VLAN capabilities from Layer 2 to Layer 3.

There is no micro-segmentation in this topology.

9. Which three common breach points can be found in a typical OT environment? (Choose three.)

Global hat

Hard hat

VLAN exploits

Black hat

RTU exploits

10. As an OT administrator, it is important to understand how industrial protocols work in an OT network.

Which communication method is used by the Modbus protocol?

It uses OSI Layer 2 and the primary device sends data based on request from secondary device.

It uses OSI Layer 2 and both the primary/secondary devices always send data during the communication.

It uses OSI Layer 2 and both the primary/secondary devices send data based on a matching token ring.

It uses OSI Layer 2 and the secondary device sends data based on request from primary device.

Page 2 of 2

11. Refer to the exhibit.

Given the configurations on the FortiGate, which statement is true?

FortiGate is configured with forward-domains to reduce unnecessary traffic.

FortiGate is configured with forward-domains to forward only domain controller traffic.

FortiGate is configured with forward-domains to forward only company domain website traffic.

FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.

NSE7_OTS-6.4 Fortinet NSE 7-OT Security 6.4 Training Material

NSE7_OTS-6.4 Fortinet NSE 7-OT Security 6.4 Training Material

Share this post

Leave a Reply Cancel reply

Related Posts