Free certification test prep

Q14. Refer to the exhibit.

A partial OT network is shown. In this OT network, you must add additional security measures to detect OT protocols and, therefore, increase the traffic visibility. Which security sensor must you implement to detect the OT protocols in this network? (Choose one answer)

Q15. Refer to the exhibit. A partial Application Sensor profile is shown.

When you apply this profile in a firewall policy, which two statements are correct? (Choose two answers)

Q16. Refer to the exhibit.

A partial OT network is shown.
You want to enforce access control from Engineering Workstation to PLC.
How can you achieve this on FortiGate?

Q17. Refer to the exhibit.

A FortiAnalyzer Event Monitor page is shown.
Based on the Event Monitor page, which two statements are correct? (Choose two.)

Q18. Refer to the exhibit. You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

Q19. Refer to the exhibit. The network topology in the exhibit shows FortiGate devices as well as FortiAnalyzer and FortiSIEM for the OT network.
Which two steps must you take to configure logging on the OT network’? (Choose two.)

Q20. To improve visibility into the risks in your OT network, you would like to create a new report on FortiAnalyzer.
What must you do to create this report? (Choose one answer)

Q21. Refer to the exhibit.

A partial OT network is shown.
You have configured the FortiGate device with VLANs to segment the OT network. The supervisor now wants to connect to the PLC from the Engineering Workstation.
How can you allow access from the Engineering Workstation to the PLC?

Q22. A supervisor is configuring a software switch on a FortiGate device. What must the supervisor configure on FortiGate to control the traffic between member interfaces on the software switch, using firewall policies?

Q23. Refer to the exhibit.

A Run_report task is shown. You want to automate the generation of a newly created report on FortiAnalyzer . When you configure the Run_report task in Playbook, why is the report not shown in the Report field? (Choose two answers)

Q24. Refer to the exhibit. An operational technology rule is created and successfully activated to monitor the Modbus protocol on FortiSIEM. However, the rule does not trigger incidents despite Modbus traffic and application logs being received correctly by FortiSIEM.
Which statement correctly describes the issue on the rule configuration?

Q25. Refer to the exhibit.

A simplified OT network is shown. You want to optimize the protection of this OT network. Which two controls must you implement? (Choose two answers)

Q26. You want to improve access control for your large OT network using passive authentication. What must you configure on FortiGate? (Choose one answer)

Q27. In the Purdue model, at which level are physical assets like the Industrial Internet of Things (IIoT) placed? (Choose one answer)

Q28. Refer to the exhibit, which shows a nonprotected OT environment. An administrator needs to implement appropriate protection on the OT network.
Which three steps should an administrator take to protect the OT network? (Choose three.)

Q29. During layer 2 polling , which two pieces of information are gathered by FortiNAC to identify a device?
(Choose two answers)

Q30. Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)? (Choose three.)