VCEdump

NSE7_OTS-6.4 Fortinet NSE 7 - OT Security 6.4

PDF question preview Back to product

Free preview

6 sample questions

The complete product contains 35 questions.

Question formats

Single choice2

Multiple choice4

Compare study plans

Fortinet · NSE7_OTS-6.4

NSE7_OTS-6.4 questions and answers

Review the question wording, option layout, and available explanations before choosing a study plan.

Question 1

Multiple choice

Refer to the exhibit, which shows a non-protected OT environment.

An administrator needs to implement proper protection on the OT network.

Which three steps should an administrator take to protect the OT network? (Choose three.)

A
Deploy an edge FortiGate between the internet and an OT network as a one-arm sniffer.
B
Deploy a FortiGate device within each ICS network.
C
Configure firewall policies with web filter to protect the different ICS networks.
D
Configure firewall policies with industrial protocol sensors
E
Use segmentation

Reveal answer details Close answer details

Correct answersA, C, D

Question 2

Multiple choice

Refer to the exhibit.

Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

A
Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.
B
Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.
C
IT and OT networks are separated by segmentation.
D
FortiGate-3 and FortiGate-4 devices must be in a transparent mode.

Reveal answer details Close answer details

Correct answersC, D

Question 3

Multiple choice

An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.

Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

A
You must set correct operator in event handler to trigger an event.
B
You can automate SOC tasks through playbooks.
C
Each playbook can include multiple triggers.
D
You cannot use Windows and Linux hosts security events with FortiSoC.

Reveal answer details Close answer details

Correct answersB, C

Question 4

Single choice

As an OT administrator, it is important to understand how industrial protocols work in an OT network.

Which communication method is used by the Modbus protocol?

A
It uses OSI Layer 2 and the primary device sends data based on request from secondary device.
B
It uses OSI Layer 2 and both the primary/secondary devices always send data during the communication.
C
It uses OSI Layer 2 and both the primary/secondary devices send data based on a matching token ring.
D
It uses OSI Layer 2 and the secondary device sends data based on request from primary device.

Reveal answer details Close answer details

Correct answerD

Question 5

Multiple choice

You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM.

Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)

A
Security
B
IPS
C
List
D
Risk
E
Overview

Reveal answer details Close answer details

Correct answersC, D, E

Question 6

Single choice

What triggers Layer 2 polling of infrastructure devices connected in the network?

A
A failed Layer 3 poll
B
A matched security policy
C
A matched profiling rule
D
A linkup or linkdown trap

Reveal answer details Close answer details

Correct answerD