Latest Fortinet NSE6_OTS_AR-7.6 Actual Free Exam Questions & Community Discussion, Page 4

Question #40

With the limit of using one firewall device, the administrator enables multi-VDOM on FortiGate to provide independent multiple security domains to each ICS network.
Which statement ensures security protection is in place for all ICS networks?

A. Each traffic VDOM must have a direct connection to FortiGuard services to receive the required security updates.

B. The management VDOM must have access to all global security services.

C. Traffic between VDOMs must pass through the physical interfaces of FortiGate to check for security incidents.

D. Each VDOM must have an independent security license.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #41

An OT network architect must deploy a solution to protect fuel pumps in an industrial remote network. All the fuel pumps must be closely monitored from the corporate network for any temperature fluctuations.
How can the OT network architect achieve this goal?

A. Configure a fuel server on the remote network, and deploy a FortiSIEM with a single pattern temperature performance rule on the corporate network.

B. Configure a fuel server on the corporate network, and deploy a FortiSIEM with a single pattern temperature performance rule on the remote network.

C. Configure a fuel server on the remote network, and deploy a FortiSIEM with a single pattern temperature security rule on the corporate network.

D. Configure both fuel server and FortiSIEM with a single-pattern temperature performance rule on the corporate network.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #42

Refer to the exhibit.

A firewall policy page is shown.
To improve the security of your OT network, you have configured a Supervisor profile in the firewall policies, as shown in the exhibit. However, a supervisor is reporting that he cannot ping PLC-1.
What are the two reasons? (Choose two.)

A. The supervisor must first authenticate using a protocol such as HTTPS or Telnet.

B. The Supervisor profile is not configured in the remote server.

C. The CLI parameter auth-on-demand is set to always.

D. The firewall policy ID 8 is not enabled.

Discussion 0

Correct Answer: A,C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #43

Which two statements about FortiSIEM are true? (Choose two.)

A. FortiSIEM cannot receive data from a Windows server without an agent.

B. FortiSIEM can receive and collect data from network devices and applications.

C. FortiSIEM can receive data from any network device and application.

D. FortiSIEM can receive data from certain devices in SQL format.

Discussion 0

Correct Answer: A,B Vote an answer

Question #44

You want to gain complete visibility of the entire attack surface using FortiAnalyzer. Which two views must you use to achieve this result? (Choose two.)

A. Risk Summary Dashboard

B. SOC Dashboard

C. Resources Reports

D. MITRE ATT&CK Attack

E. Analytics Search

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #45

You want to improve the security of your OT network and therefore deploy a FortiGate device with the OT signatures database. Which two statements about this database are true? (Choose two.)

A. You must import the OT signatures database manually.

B. You must install a valid OT security service license.

C. The OT signatures database is enabled by default.

D. You must set exclude-signatures to none in the console line interface.

Discussion 0

Correct Answer: B,C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #46

Refer to the exhibit. A Run_report task is shown.

You want to automate the generation of a newly created report on FortiAnalyzer.
When you configure the Run_report task in Playbook, why is the report not shown in the Report field? (Choose two answers)

A. You must first select Playbook Starter, and then select the newly created report.

B. You must first configure the connector.

C. You must first enable Auto-cache in the report.

D. You must first enable Extended Log Filtering in the report.

E. You must first configure an event handler.

Discussion 0

Correct Answer: B,C Vote an answer

Question #47

Refer to the exhibit.

A partial OT network is shown. You have configured the FortiGate device with VLANs to segment the OT network. The supervisor now wants to connect to the PLC from the Engineering Workstation. How can you allow access from the Engineering Workstation to the PLC? (Choose one answer)

A. You must configure intra-switch-policy as explicit.

B. You must configure forward domain IDs.

C. You must configure a layer 3 switch.

D. You must configure intra-switch-policy as implicit.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #48

Refer to the exhibit. An OT network architect must implement inter-VLAN routing in the topology.
Traffic from each client is tagged with a unique VLAN. Each client is directly connected to a Layer
2 switch.
Which action must the OT network architect take to achieve this goal?

A. Set the same forward domain on each switch interface.

B. Make FortiGate a router on a stick.

C. Configure a software switch to handle traffic for each client.

D. Replace the switch with a Layer 3 device.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #49

Refer to the exhibits.

A partial view of the Playbook Monitor page and the corresponding playbook configuration are shown.
Based on the monitor page and the configuration of the playbook, what has triggered the Run_Report task?
(Choose one answer)

A. An Event_Trigger log

B. An IPS_Attack_Incident log

C. An IPS incident creation

D. An IPS_Attack_Handling event

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #50

Refer to the exhibit. Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)

A. FortiGate for SD-WAN

B. FortiSIEM for security incident and event management

C. FortiEDR for endpoint detection

D. FortiNAC for network access control

E. FortiGate for application control and intrusion prevention system (IPS)

Discussion 0

Correct Answer: C,D,E Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #51

Refer to the exhibit.

The OT devices behind the ruggedized FortiGate have vulnerabilities and you want to apply a virtual patching profile in the firewall policy. Why is Virtual Patching not available in the Security Profiles section? (Choose one answer)

A. You must enable OT signatures.

B. You must have a valid OT security service license.

C. You must have a ruggedized FortiGate allowing the virtual patching feature.

D. You must enable Virtual Patching in the Feature Visibility section.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Question #52

What are two critical tasks the OT network auditors must perform during OT network risk assessment and management? (Choose two.)

A. Evaluating what can go wrong before it happens

B. Planning a threat hunting strategy

C. Implementing strategies to automatically bring PLCs offline

D. Creating disaster recovery plans to switch operations to a backup plant

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for EduDump members. You can sign-up / login (it's free).

Fortinet NSE6_OTS_AR-7.6 Actual Free Exam Questions & Community Discussion

Download Free Fortinet NSE6_OTS_AR-7.6 Demo