NSE6_OTS_AR-7.6 by Fortinet Actual Free Exam Questions And Answers

Question 1

In the context of FortiNAC, what is a key feature of a logical network?

A. It groups up to 10 VLANs into a single policy.

B. It can identify several endpoints with a single rule.

C. It creates a one-to-one association between a network access policy and a VLAN.

D. It simplifies network access policy management by reducing the number of policies needed.

Discussion 0

Correct Answer: D Vote an answer

Question 2

An OT network architect must deploy a solution to protect fuel pumps in an industrial remote network. All the fuel pumps must be closely monitored from the corporate network for any temperature fluctuations.
How can the OT network architect achieve this goal?

A. Configure a fuel server on the remote network and deploy a FortiSIEM with a single pattern temperature performance rule on the corporate network.

B. Configure a fuel server on the corporate network, and deploy a FortiSIEM with a single pattern temperature performance rule on the remote network.

C. Configure both fuel server and FortiSIEM with a single-pattern temperature performance rule on the corporate network.

D. Configure a fuel server on the remote network, and deploy a FortiSIEM with a single pattern temperature security rule on the corporate network.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

Refer to the exhibits. Which statement about some of the generated report elements from FortiAnalyzer is true?

A. The file types confirm the infected applications on the PLCs.

B. The report confirms Modbus and IEC 104 are the key applications crossing the network.

C. This report is predefined and is not available for customization.

D. FortiGate collects the logs and generates the report to FortiAnalyzer.

Discussion 0

Correct Answer: B Vote an answer

Question 4

Refer to the exhibit.

A partial OT network is shown.
The OT network is divided into two main networks with a FortiGate device operating in NAT mode.
How can you further segment network 1 from network 2?

A. You can configure universal ZTNA.

B. You can configure different forward domain IDs for network 1 and network 2.

C. You can configure the FortiGate interface as an implicit software switch.

D. You can configure two traffic VDOMs.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

An OT network architect needs to secure control area zones with a single network access policy to provision devices to any number of different networks. On which device can this be accomplished?

A. FortiNAC

B. FortiGate

C. FortiEDR

D. FortiSwitch

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

Refer to the exhibit. Based on the information provided on the partial Event Monitor page shown in the exhibit, how was the attack detected?

A. Automatically by an event handler

B. Automatically by a stitch

C. Automatically by a playbook

D. Manually by an administrator

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)

A. Destination defined as internet services in the firewall policy

B. Services defined in the firewall policy.

C. Lowest to highest policy ID number

D. Highest to lowest priority defined in the firewall policy

E. Source defined as internet services in the firewall policy

Discussion 0

Correct Answer: A,B,E Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 8

Refer to the exhibit. The network topology in the exhibit shows FortiGate devices as well as FortiAnalyzer and FortiSIEM for the OT network.
Which two steps must you take to configure logging on the OT network'? (Choose two.)

A. Configure FortiSIEM to send logs and alerts to FortiAnalyzer.

B. Configure FortiAnalyzer to send security events to FortiSIEM.

C. Configure FortiGate and FortiAnalyzer to send industrial signature patterns to FortiSIEM.

D. Configure FortiGate to send logs to FortiAnalyzer and FortiSIEM.

Discussion 0

Correct Answer: B,D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 9

Refer to the exhibit. The FGT-Edge device is a VPN gateway that allows remote administrators access to the local ICS network. Management hires a third-party company to conduct health and safety on site. The third-party company must have outbound access to external resources.
What is the best scenario to provide external access to the third-party company while continuing to secure the ICS networks?

A. Split the edge FortiGate device into multiple logical devices to allocate an independent VDOM for the third-party company.

B. Implement an additional firewall using an additional upstream link to the internet.

C. Create VPN tunnels between downstream FortiGate devices and the edge FortiGate to protect ICS network traffic.

D. Configure outbound security policies with limited active authentication users of the third-party company.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 10

Refer to the exhibit. In order for a FortiGate device to act as router on a stick, what configuration must an OT network architect implement on FortiGate to achieve inter-VLAN routing?

A. Set a FortiGate interface with the switch to operate as an 802.1 q trunk.

B. Set a software switch on FortiGate to handle inter-VLAN traffic.

C. Set a unique forward domain on each interface on the network.

D. Set FortiGate to operate in transparent mode.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 11

An OT supervisor has configured LDAP and FSSO for authentication. The goal is that all users be authenticated against passive authentication first and. if passive authentication is not successful, then users should be challenged with active authentication.
What should the OT supervisor do to achieve this on FortiGate?

A. Configure a firewall policy with FSSO users and place it on the top of list of firewall policies.

B. Configure a firewall policy with LDAP users and place it on the top of list of firewall policies.

C. Enable two-factor authentication with FSSO.

D. Under config user settings configure set auth-on-demand implicit.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 12

Refer to the exhibit. You are navigating through FortiSIEM in an OT network. How do you view information presented in the exhibit and what does the FortiGate device security status tell you?

A. In the business service dashboard and there are one or more high-severity security incidents for the FortiGate device.

B. In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.

C. In the widget dashboard and there are one or more high-severity incidents for the FortiGate device.

D. In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device.

Discussion 0

Correct Answer: D Vote an answer

Fortinet NSE 6 - OT Security 7.6 Architect - NSE6_OTS_AR-7.6 Exam Practice Test

Contact Us

Useful Links

Latest Updated