Fortinet NSE7_OTS-6.4 Free Practice Questions

NEW QUESTION 1
When device profiling rules are enabled, which devices connected on the network are evaluated by the device profiling rules?

• A. Known trusted devices, each time they change location
• B. All connected devices, each time they connect
• C. Rogue devices, only when they connect for the first time
• D. Rogue devices, each time they connect

Answer: C

NEW QUESTION 2
Refer to the exhibit, which shows a non-protected OT environment.

An administrator needs to implement proper protection on the OT network.
Which three steps should an administrator take to protect the OT network? (Choose three.)

• A. Deploy an edge FortiGate between the internet and an OT network as a one-arm sniffer.
• B. Deploy a FortiGate device within each ICS network.
• C. Configure firewall policies with web filter to protect the different ICS networks.
• D. Configure firewall policies with industrial protocol sensors
• E. Use segmentation

Answer: ACD

NEW QUESTION 3
Refer to the exhibit

In the topology shown in the exhibit, both PLCs can communicate directly with each other, without going
through the firewall.
Which statement about the topology is true?

• A. PLCs use IEEE802.1Q protocol to communicate each other.
• B. An administrator can create firewall policies in the switch to secure between PLCs.
• C. This integration solution expands VLAN capabilities from Layer 2 to Layer 3.
• D. There is no micro-segmentation in this topology.

Answer: D

NEW QUESTION 4
An OT supervisor needs to protect their network by implementing security with an industrial signature database on the FortiGate device.
Which statement about the industrial signature database on FortiGate is true?

• A. A supervisor must purchase an industrial signature database and import it to the FortiGate.
• B. An administrator must create their own database using custom signatures.
• C. By default, the industrial database is enabled.
• D. A supervisor can enable it through the FortiGate CLI.

Answer: D

NEW QUESTION 5
What can be assigned using network access control policies?

• A. Layer 3 polling intervals
• B. FortiNAC device polling methods
• C. Logical networks
• D. Profiling rules

Answer: D

NEW QUESTION 6
Refer to the exhibit.

Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)

• A. FortiGate for SD-WAN
• B. FortiGate for application control and IPS
• C. FortiNAC for network access control
• D. FortiSIEM for security incident and event management
• E. FortiEDR for endpoint detection

Answer: BCD

NEW QUESTION 7
An OT administrator deployed many devices to secure the OT network. However, the SOC team is reporting that there are too many alerts, and that many of the alerts are false positive. The OT administrator would like to find a solution that eliminates repetitive tasks, improves efficiency, saves time, and saves resources.
Which products should the administrator deploy to address these issues and automate most of the manual tasks done by the SOC team?

• A. FortiSIEM and FortiManager
• B. FortiSandbox and FortiSIEM
• C. FortiSOAR and FortiSIEM
• D. A syslog server and FortiSIEM

Answer: C

NEW QUESTION 8
Refer to the exhibit.

An OT administrator ran a report to identify device inventory in an OT network. Based on the report results, which report was run?

• A. A FortiSIEM CMDB report
• B. A FortiAnalyzer device report
• C. A FortiSIEM incident report
• D. A FortiSIEM analytics report

Answer: A

NEW QUESTION 9
Refer to the exhibit.

Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

• A. Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.
• B. Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair ofFortiSwitch devices.
• C. IT and OT networks are separated by segmentation.
• D. FortiGate-3 and FortiGate-4 devices must be in a transparent mode.

Answer: CD

NEW QUESTION 10
Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)? (Choose three.)

• A. FortiNAC
• B. FortiManager
• C. FortiAnalyzer
• D. FortiSIEM
• E. FortiGate

Answer: ACD

NEW QUESTION 11
When you create a user or host profile, which three criteria can you use? (Choose three.)

• A. Host or user group memberships
• B. Administrative group membership
• C. An existing access control policy
• D. Location
• E. Host or user attributes

Answer: ADE

NEW QUESTION 12
......