Fortinet NSE 6 - OT Security 7.6 Architect - NSE6_OTS_AR-7.6 模擬練習

Which statement about how FortiNAC re-evaluates previously profiled devices is true?

正解: B
解説: (PassTest メンバーにのみ表示されます)
An OT customer is using multiple FortiGate devices in their network to implement two-factor authentication with hardware FortiTokens. A supervisor is carrying multiple FortiTokens to be used when logging in to a critical server behind different FortiGate devices.
As an OT network architect, which approach must you take in order to assign one token per user and still use two-factor authentication on multiple FortiGate devices?

正解: A
An OT architect has deployed a Layer 2 switch in the OT network at Level 1 in the Purdue model- process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs.
All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.
Which statement about the traffic between PLC1 and PLC2 is true?

正解: D
解説: (PassTest メンバーにのみ表示されます)
Refer to the exhibit.

A partial OT network is shown.
The OT network is divided into two main networks with a FortiGate device operating in NAT mode.
How can you further segment network 1 from network 2?

正解: D
解説: (PassTest メンバーにのみ表示されます)
Refer to the exhibit.

A partial legacy OT network is shown.
You must improve this historically flat OT network and minimize the risk of lateral movement.
Which action must you perform?

正解: C
解説: (PassTest メンバーにのみ表示されます)
Refer to the exhibit. You need to configure VPN user access for supervisors at the branch and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

正解: D
解説: (PassTest メンバーにのみ表示されます)
In the context of FortiNAC, what is a key feature of a logical network?

正解: A
Refer to the exhibits. Which statement is true about the traffic passing through to PLC-2?

正解: A
解説: (PassTest メンバーにのみ表示されます)
Refer to the exhibits.


A partial view of the Event Monitor page and the corresponding playbook configuration are shown.
Based on the Event Monitor page and the configuration of the playbook, what has triggered the Run_Report task?

正解: B
解説: (PassTest メンバーにのみ表示されます)
When device profiling rules are enabled, which devices connected on the network are evaluated by the device profiling rules?

正解: C
A supervisor is configuring a software switch on a FortiGate device. What must the supervisor configure on FortiGate to control the traffic between member interfaces on the software switch, using firewall policies?

正解: D
Which two frameworks are common to secure ICS industrial processes, including SCADA and DCS? (Choose two.)

正解: A,B
解説: (PassTest メンバーにのみ表示されます)