Fortinet NSE 6 - OT Security 7.6 Architect (NSE6_OTS_AR-7.6) Free Practice Test

Question 1

FortiAnalyzer is implemented in the OT network to receive logs from responsible FortiGate devices. The logs must be processed by FortiAnalyzer.
In this scenario, which statement is correct about the purpose of FortiAnalyzer receiving and processing multiple log messages from a given PLC or RTU?

A. To help OT administrators configure the network and prevent breaches

B. To determine which type of messages from the PLC or RTU causes issues in the plant

C. To isolate PLCs or RTUs in the event of external attacks

D. To configure event handlers and take further action on FortiGate

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Refer to the exhibit. You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

A. You must use the user self-registration server.

B. You must register the same FortiToken on more than one FortiGate.

C. You must use a FortiAuthenticator.

D. You must use a third-party RADIUS OTP server.

Correct Answer: C

Question 3

Refer to the exhibit.A new operational technology rule is being created to monitor Modbus protocol traffic on FortiSIEM.
Which action will ensure all Modbus messages on the network match the rule?

A. This rule is valid and requires no additional changes.

B. Remove attributes in the Group By section that are not configured in the Filter section.

C. Set the Aggregate attribute value to equal to or greater than zero.

D. Add a new condition to filter Modbus traffic based on the Source TCP/UDP port.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Refer to the exhibit. An OT administrator ran a report to identify device inventory in an OT network.
Based on the report results, which report was run?

A. A FortiSIEM incident report

B. A FortiAnalyzer device report

C. A FortiSIEM analytics report

D. A FortiSIEM CMDB report

Correct Answer: D

Question 5

In the Purdue model, at which level are physical assets like the Industrial Internet of Things (IIoT) placed?

A. At Level 5 only

B. Below Level 3.5

C. At Level 1 only

D. Above Level 4

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

Refer to the exhibit. The network topology in the exhibit shows FortiGate devices as well as FortiAnalyzer and FortiSIEM for the OT network.
Which two steps must you take to configure logging on the OT network'? (Choose two.)

A. Configure FortiGate to send logs to FortiAnalyzer and FortiSIEM.

B. Configure FortiGate and FortiAnalyzer to send industrial signature patterns to FortiSIEM.

C. Configure FortiAnalyzer to send security events to FortiSIEM.

D. Configure FortiSIEM to send logs and alerts to FortiAnalyzer.

Correct Answer: A,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit.

An automation trigger creation wizard is shown. You want to automate some tasks in your OT network. In a FortiGate device, you create a new automation trigger based on a FortiAnalyzer event handler. When you want to configure the Event handler name field, the event handler created in FortiAnalyzer is not shown.
What are two reasons for this? (Choose two answers)

A. You must add the FortiGate device to FortiAnalyzer and authorize it.

B. You must click + Create in the Event handler name field.

C. You must configure the Fabric settings on the FortiGate device.

D. You must enable Automation Stitch in the event handler on FortiAnalyzer.

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

What are two benefits of a Nozomi integration with FortiNAC? (Choose two.)

A. Adapter consolidation for multi-adapter hosts

B. Importation and classification of hosts

C. Enhanced point of connection details

D. Direct VLAN assignment

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Refer to the exhibit.

A partial Application Sensor profile is shown. When you apply this profile in a firewall policy, which two statements are correct? (Choose two answers)

A. A log is provided for each Modbus command.

B. OT signatures are enabled.

C. A log is provided for each IEC command.

D. All OT protocols are blocked.

Correct Answer: B,C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet NSE 6 - OT Security 7.6 Architect (NSE6_OTS_AR-7.6) Free Practice Test