NSE7_OTS-6.4 | All About Guaranteed NSE7_OTS-6.4 Free Exam

NEW QUESTION 1
An OT supervisor has configured LDAP and FSSO for the authentication. The goal is that all the users be authenticated against passive authentication first and, if passive authentication is not successful, then users should be challenged with active authentication.
What should the OT supervisor do to achieve this on FortiGate?

• A. Configure a firewall policy with LDAP users and place it on the top of list of firewall policies.
• B. Enable two-factor authentication with FSSO.
• C. Configure a firewall policy with FSSO users and place it on the top of list of firewall policies.
• D. Under config user settings configure set auth-on-demand implicit.

Answer: D

NEW QUESTION 2
An OT administrator deployed many devices to secure the OT network. However, the SOC team is reporting that there are too many alerts, and that many of the alerts are false positive. The OT administrator would like to find a solution that eliminates repetitive tasks, improves efficiency, saves time, and saves resources.
Which products should the administrator deploy to address these issues and automate most of the manual tasks done by the SOC team?

• A. FortiSIEM and FortiManager
• B. FortiSandbox and FortiSIEM
• C. FortiSOAR and FortiSIEM
• D. A syslog server and FortiSIEM

Answer: C

NEW QUESTION 3
An OT supervisor needs to protect their network by implementing security with an industrial signature database on the FortiGate device.
Which statement about the industrial signature database on FortiGate is true?

• A. A supervisor must purchase an industrial signature database and import it to the FortiGate.
• B. An administrator must create their own database using custom signatures.
• C. By default, the industrial database is enabled.
• D. A supervisor can enable it through the FortiGate CLI.

Answer: D

NEW QUESTION 4
Refer to the exhibit.

Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

• A. Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.
• B. Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair ofFortiSwitch devices.
• C. IT and OT networks are separated by segmentation.
• D. FortiGate-3 and FortiGate-4 devices must be in a transparent mode.

Answer: CD

NEW QUESTION 5
What are two benefits of a Nozomi integration with FortiNAC? (Choose two.)

• A. Enhanced point of connection details
• B. Direct VLAN assignment
• C. Adapter consolidation for multi-adapter hosts
• D. Importation and classification of hosts

Answer: AB

NEW QUESTION 6
In a wireless network integration, how does FortiNAC obtain connecting MAC address information?

• A. RADIUS
• B. Link traps
• C. End station traffic monitoring
• D. MAC notification traps

Answer: A

NEW QUESTION 7
Refer to the exhibit.

Given the configurations on the FortiGate, which statement is true?

• A. FortiGate is configured with forward-domains to reduce unnecessary traffic.
• B. FortiGate is configured with forward-domains to forward only domain controller traffic.
• C. FortiGate is configured with forward-domains to forward only company domain website traffic.
• D. FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.

Answer: A

NEW QUESTION 8
Refer to the exhibit

In the topology shown in the exhibit, both PLCs can communicate directly with each other, without going
through the firewall.
Which statement about the topology is true?

• A. PLCs use IEEE802.1Q protocol to communicate each other.
• B. An administrator can create firewall policies in the switch to secure between PLCs.
• C. This integration solution expands VLAN capabilities from Layer 2 to Layer 3.
• D. There is no micro-segmentation in this topology.

Answer: D

NEW QUESTION 9
When device profiling rules are enabled, which devices connected on the network are evaluated by the device profiling rules?

• A. Known trusted devices, each time they change location
• B. All connected devices, each time they connect
• C. Rogue devices, only when they connect for the first time
• D. Rogue devices, each time they connect

Answer: C

NEW QUESTION 10
An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.
Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

• A. You must set correct operator in event handler to trigger an event.
• B. You can automate SOC tasks through playbooks.
• C. Each playbook can include multiple triggers.
• D. You cannot use Windows and Linux hosts security events with FortiSoC.

Answer: BC

Explanation:
Ref: https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/268882/fortisoc

NEW QUESTION 11
Refer to the exhibit.

Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)

• A. FortiGate for SD-WAN
• B. FortiGate for application control and IPS
• C. FortiNAC for network access control
• D. FortiSIEM for security incident and event management
• E. FortiEDR for endpoint detection

Answer: BCD

NEW QUESTION 12
......