[OT Network Fundamentals and Segmentation]
Refer to the exhibit.
Based on the topology designed by the OT architect, which two statements about implementing OT
security are true? (Choose two.)
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A, C
Q: 2
[OT Network Fundamentals and Segmentation]
A FortiGate device is newly deployed as the edge gateway of an OT network security fabric. The
downstream FortiGate devices are also newly deployed as Security Fabric leafs to protect the control
area zone.
With no additional essential networking devices, and to implement micro-segmentation on this OT
network, what configuration must the OT network architect apply to control intra-VLAN traffic?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B
Q: 3
[Fortinet Products for OT Security]
Which three common breach points can be found in a typical OT environment? (Choose three.)
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B, D, E
Q: 4
[Fortinet Products for OT Security]
Operational technology (OT) network analysts run different levels of reports to identify failures that
could put the network at risk Some of these reports may be related to device performance
Which FortiSIEM reporting method helps identify device failures?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
C
Q: 5
[Fortinet Products for OT Security]
An OT supervisor has configured LDAP and FSSO for the authentication. The goal is that all the users
be authenticated against passive authentication first and, if passive authentication is not successful,
then users should be challenged with active authentication.
What should the OT supervisor do to achieve this on FortiGate?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
C
Q: 6
[Fortinet Products for OT Security]
What are two benefits of a Nozomi integration with FortiNAC? (Choose two.)
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
C, D
Q: 7
[Fortinet Products for OT Security]
How can you achieve remote access and internet availability in an OT network?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B
Q: 8
[OT Network Fundamentals and Segmentation]
Refer to the exhibit.
PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1)
connecting both PLC-3 and CLIENT. PLC-3 and CLIENT can send traffic to each other at the Layer 2
level.
What must the OT admin do to prevent Layer 2-level communication between PLC-3 and CLIENT?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A, B
Q: 9
[OT Network Fundamentals and Segmentation]
As an OT network administrator, you are managing three FortiGate devices that each protect
different levels on the Purdue model. To increase traffic visibility, you are required to implement
additional security measures to detect exploits that affect PLCs.
Which security sensor must implement to detect these types of industrial exploits?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
D
Q: 10
[Industrial Protocols and Risk Assessment]
What are two critical tasks the OT network auditors must perform during OT network risk assessment
and management? (Choose two.)
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A, C
Q: 11
[OT Network Fundamentals and Segmentation]
Refer to the exhibit.
In order for a FortiGate device to act as router on a stick, what configuration must an OT network
architect implement on FortiGate to achieve inter-VLAN routing?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
D
Q: 12
[Fortinet Products for OT Security]
Which two statements are true when you deploy FortiGate as an offline IDS? (Choose two.)
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
B, C
Q: 13
[Monitoring, Logging, and Incident Response]
Refer to the exhibit.
An OT administrator ran a report to identify device inventory in an OT network.
Based on the report results, which report was run?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A
Q: 14
[Fortinet Products for OT Security]
Which three methods of communication are used by FortiNAC to gather visibility information?
(Choose three.)
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
A, C, D
Q: 15
[Fortinet Products for OT Security]
An OT administrator configured and ran a default application risk and control report in FortiAnalyzer
to learn more about the key application crossing the network. However, the report output is empty
despite the fact that some related real-time and historical logs are visible in the FortiAnalyzer.
What are two possible reasons why the report output was empty? (Choose two.)
Based on the topology designed by the OT architect, which two statements about implementing OT
security are true? (Choose two.)
PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1)
connecting both PLC-3 and CLIENT. PLC-3 and CLIENT can send traffic to each other at the Layer 2
level.
What must the OT admin do to prevent Layer 2-level communication between PLC-3 and CLIENT?
In order for a FortiGate device to act as router on a stick, what configuration must an OT network
architect implement on FortiGate to achieve inter-VLAN routing?
An OT administrator ran a report to identify device inventory in an OT network.
Based on the report results, which report was run?