VCEEngine NSE7_OTS-6.4 Dumps PDF - 100% Passing Guarantee
NSE7_OTS-6.4 Braindumps Real Exam Updated on Feb 13, 2022 with 36 Questions
NEW QUESTION 10
What triggers Layer 2 polling of infrastructure devices connected in the network?
- A. A failed Layer 3 poll
- B. A matched profiling rule
- C. A matched security policy
- D. A linkup or linkdown trap
Answer: D
NEW QUESTION 11
Refer to the exhibit.
Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)
- A. IT and OT networks are separated by segmentation.
- B. Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.
- C. FortiGate-3 and FortiGate-4 devices must be in a transparent mode.
- D. Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.
Answer: A,C
NEW QUESTION 12
An OT network architect needs to secure control area zones with a single network access policy to provision devices to any number of different networks.
On which device can this be accomplished?
- A. FortiNAC
- B. FortiEDR
- C. FortiSwitch
- D. FortiGate
Answer: A
NEW QUESTION 13
Refer to the exhibit.
Given the configurations on the FortiGate, which statement is true?
- A. FortiGate is configured with forward-domains to forward only domain controller traffic.
- B. FortiGate is configured with forward-domains to forward only company domain website traffic.
- C. FortiGate is configured with forward-domains to reduce unnecessary traffic.
- D. FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.
Answer: C
NEW QUESTION 14
An OT network administrator is trying to implement active authentication.
Which two methods should the administrator use to achieve this? (Choose two.)
- A. Role-based authentication on FortiNAC
- B. Local authentication on FortiGate
- C. FSSO authentication on FortiGate
- D. Two-factor authentication on FortiAuthenticator
Answer: A,D
NEW QUESTION 15
Refer to the exhibit.
You are navigating through FortiSIEM in an OT network.
How do you view information presented in the exhibit and what does the FortiGate device security status tell you?
- A. In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device.
- B. In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.
- C. In the business service dashboard and there are one or more high-severity security incidents for the FortiGate device.
- D. In the widget dashboard and there are one or more high-severity incidents for the FortiGate device.
Answer: A
NEW QUESTION 16
Which three common breach points can be found in a typical OT environment? (Choose three.)
- A. Global hat
- B. RTU exploits
- C. Black hat
- D. VLAN exploits
- E. Hard hat
Answer: B,C,D
NEW QUESTION 17
Refer to the exhibit.
Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)
- A. FortiNAC for network access control
- B. FortiEDR for endpoint detection
- C. FortiGate for application control and IPS
- D. FortiGate for SD-WAN
- E. FortiSIEM for security incident and event management
Answer: A,C,E
NEW QUESTION 18
When device profiling rules are enabled, which devices connected on the network are evaluated by the device profiling rules?
- A. Rogue devices, each time they connect
- B. Known trusted devices, each time they change location
- C. All connected devices, each time they connect
- D. Rogue devices, only when they connect for the first time
Answer: D
NEW QUESTION 19
When you create a user or host profile, which three criteria can you use? (Choose three.)
- A. Host or user attributes
- B. Host or user group memberships
- C. Administrative group membership
- D. Location
- E. An existing access control policy
Answer: A,B,D
NEW QUESTION 20
An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.
Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)
- A. Each playbook can include multiple triggers.
- B. You cannot use Windows and Linux hosts security events with FortiSoC.
- C. You can automate SOC tasks through playbooks.
- D. You must set correct operator in event handler to trigger an event.
Answer: A,C
Explanation:
Ref: https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/268882/fortisoc
NEW QUESTION 21
In a wireless network integration, how does FortiNAC obtain connecting MAC address information?
- A. RADIUS
- B. Link traps
- C. MAC notification traps
- D. End station traffic monitoring
Answer: A
NEW QUESTION 22
An OT architect has deployed a Layer 2 switch in the OT network at Level 1 the Purdue model-process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs. All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.
What statement about the traffic between PLC1 and PLC2 is true?
- A. In order to communicate, PLC1 must be in the same VLAN as PLC2.
- B. The Layer 2 switches routes any traffic to the FortiGate device through an Ethernet link.
- C. The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.
- D. PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.
Answer: D
NEW QUESTION 23
What can be assigned using network access control policies?
- A. Logical networks
- B. Profiling rules
- C. FortiNAC device polling methods
- D. Layer 3 polling intervals
Answer: B
NEW QUESTION 24
......
Fortinet NSE7_OTS-6.4 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
NSE7_OTS-6.4 Dumps With 100% Verified Q&As - Pass Guarantee or Full Refund: https://testking.vceengine.com/NSE7_OTS-6.4-vce-test-engine.html
