Question 1

What two advantages does FortiNAC provide in the OT network? (Choose two.)

Options :

A : It can be used for IoT device detection.

B : It can be used for industrial intrusion detection and prevention.

C : It can be used for network micro-segmentation.

D : It can be used for device profiling.

Answer: A,D

Question 2

What are two critical tasks the OT network auditors must perform during OT network risk assessment and management? (Choose two.)

Options :

A : Planning a threat hunting strategy

B : Implementing strategies to automatically bring PLCs offline

C : Creating disaster recovery plans to switch operations to a backup plant

D : Evaluating what can go wrong before it happens

Answer: B,C

Question 3

Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)

Options :

A : Services defined in the firewall policy.

B : Source defined as internet services in the firewall policy

C : Lowest to highest policy ID number

D : Destination defined as internet services in the firewall policy

E : Highest to lowest priority defined in the firewall policy

Answer: A,D,E

Question 4

What can be assigned using network access control policies?

Options :

A : Layer 3 polling intervals

B : FortiNAC device polling methods

C : Logical networks

D : Profiling rules

Answer: C

Question 5

An OT supervisor has configured LDAP and FSSO for the authentication. The goal is that all the users be authenticated against passive authentication first and, if passive authentication is not successful, then users should be challenged with active authentication.

What should the OT supervisor do to achieve this on FortiGate?

Options :

A : Configure a firewall policy with LDAP users and place it on the top of list of firewall policies.

B : Enable two-factor authentication with FSSO.

C : Configure a firewall policy with FSSO users and place it on the top of list of firewall policies.

D : Under config user settings configure set auth-on-demand implicit.

Answer: C

Higher Test Marks with Free Online NSE7_OTS-7.2.0 Exam Practice

Buying Options: