NSE7_OTS-6.4 Free Practice Test

Refer to the exhibit, which shows a non-protected OT environment.

An administrator needs to implement proper protection on the OT network.
Which three steps should an administrator take to protect the OT network? (Choose three.)

1. A. Deploy an edge FortiGate between the internet and an OT network as a one-arm sniffer.
2. B. Deploy a FortiGate device within each ICS network.
3. C. Configure firewall policies with web filter to protect the different ICS networks.
4. D. Configure firewall policies with industrial protocol sensors
5. E. Use segmentation

Correct Answer: ACD

Which three methods of communication are used by FortiNAC to gather visibility information? (Choose three.)

1. A. SNMP
2. B. ICMP
3. C. API
4. D. RADIUS
5. E. TACACS

Correct Answer: ACD

Refer to the exhibit.

You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

1. A. You must use a FortiAuthenticator.
2. B. You must register the same FortiToken on more than one FortiGate.
3. C. You must use the user self-registration server.
4. D. You must use a third-party RADIUS OTP server.

Correct Answer: A

Refer to the exhibit.

Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)

1. A. FortiGate for SD-WAN
2. B. FortiGate for application control and IPS
3. C. FortiNAC for network access control
4. D. FortiSIEM for security incident and event management
5. E. FortiEDR for endpoint detection

Correct Answer: BCD

Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)? (Choose three.)

1. A. FortiNAC
2. B. FortiManager
3. C. FortiAnalyzer
4. D. FortiSIEM
5. E. FortiGate

Correct Answer: ACD