OTS_7.2

1. 1. An OT network administrator is trying to implement active authentication.

   Which two methods should the administrator use to achieve this? (Choose two.)

• D. Local authentication on FortiGate

• A. Two-factor authentication on FortiAuthenticator

• C. FSSO authentication on FortiGate

• B. Role-based authentication on FortiNAC

2. 2. To increase security protection in an OT network, how does application control on ForliGate detect industrial traffic?

• C. By inspecting applications with more granularity by inspecting subapplication traffic

• A. By inspecting software and software-based vulnerabilities

• D. By inspecting protocols used in the application traffic

• B. By inspecting applications only on nonprotected traffic

3. 3. Which two statements about the Modbus protocol are true? (Choose two.)

• C. You can implement Modbus networking settings on internetworking devices.

• A. Modbus uses UDP frames to transport MBAP and function codes.

• D. Modbus is used to establish communication between intelligent devices.

• B. Most of the PLC brands come with a built-in Modbus module.

4. 4. An OT administrator deployed many devices to secure the OT network. However, the SOC team is reporting that there are too many alerts, and that many of the alerts are false positive. The OT administrator would like to find a solution that eliminates repetitive tasks, improves efficiency, saves time, and saves resources.

   Which products should the administrator deploy to address these issues and automate most of the manual tasks done by the SOC team?

• C. FortiSOAR and FortiSIEM

• A. FortiSIEM and FortiManager

• D. A syslog server and FortiSIEM

• B. FortiSandbox and FortiSIEM

5. 5. You are navigating through FortiSIEM in an OT network. An OT administrator deployed many devices to secure the OT network. However, the SOC team is reporting that there are too many alerts, and that many of the alerts are false positive. The OT administrator would like to find a solution that eliminates repetitive tasks, improves efficiency, saves time, and saves resources. Which products should the administrator deploy to address these issues and automate most of the manual tasks done by the SOC team? A. FortiSIEM and FortiManager B. FortiSandbox and FortiSIEM C. FortiSOAR and FortiSIEM How do you view information presented in the exhibit and what does the FortiGate device security status tell you?

• D. In the business service dashboard and there are one or more high-severity security incidents for the Fortigate device.

• A. In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.

• C. In the widget dashboard and there are one or more high-severity incidents for the FortiGate device.

• B. In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device.

6. 6. Refer to the exhibit.

7. -

8. -

9. -

10. -

11. -

12. Which statement about the interfaces shown in the exhibit is true?

• B. The VLAN ID of port1-vlan1 can be changed to the VLAN ID 10.

• A. port2, port2-vlan10, and port2-vlan1 are part of the software switch interface.

• D. port1, port1-vlan10, and port1-vlan1 are in different broadcast domains

• C. port1-vlan10 and port2-vlan10 are part of the same broadcast domain

7. 7. Which three methods of communication are used by FortiNAC to gather visibility information? (Choose A. Configure outbound security policies with limited active authentication users of the third-party company. B. Create VPN tunnels between downstream FortiGate devices and the edge FortiGate to protect ICS network traffic. C. Split the edge FortiGate device into multiple logical devices to allocate an independent VDOM for the third-party company. D. Implement an additional firewall using an additional upstream link to the internet. Answer: C three.)

• D. RADIUS

• A. SNMP

• E. TACACS

• C. API

• B. ICMP

8. 8. An OT network consists of multiple FortiGate devices. The edge FortiGate device is deployed as the secure gateway and is only allowing remote operators to access the ICS networks on site. Management hires a third-party company to conduct health and safety on site. The third-party company must have outbound access to external resources. As the OT network administrator, what is the best scenario to provide external access to the third-party company while continuing to secure the ICS networks?

• C. Split the edge FortiGate device into multiple logical devices to allocate an independent VDOM for the third-party company.

• A. Configure outbound security policies with limited active authentication users of the third-party company.

• D. Implement an additional firewall using an additional upstream link to the internet.

• B. Create VPN tunnels between downstream FortiGate devices and the edge FortiGate to protect ICS network traffic.

9. 9. Refer to the exhibit.

10. -

11. -

12. -

13. -

14. -

15. Given the configurations on the FortiGate, which statement is true?

• B. FortiGate is configured with forward-domains to forward only domain controller traffic.

• A. FortiGate is configured with forward-domains to reduce unnecessary traffic.

• D. FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.

• C. FortiGate is configured with forward-domains to forward only company domain website traffic.

10. 10. When you create a user or host profile, which three criteria can you use? (Choose three.)

• E. Host or user attributes

• A. Host or user group memberships

• C. An existing access control policy

• B. Administrative group membership

• D. Location