Fortinet NSE 7 - OT Security 6.4 (NSE7_OTS-6.4) Free Practice Test

Question 1

An OT administrator is defining an incident notification policy using FortiSIEM and would like to configure the system with a notification policy. If an incident occurs, the administrator would like to be able to intervene and block an IP address or disable a user in Active Directory from FortiSIEM.
Which step must the administrator take to achieve this task?

A. Deploy a mitigation script on Active Directory and create a notification policy on FortiSIEM.

B. Define a script/remediation on FortiManager and enable a notification rule on FortiSIEM.

C. Create a notification policy and define a script/remediation on FortiSIEM.

D. Configure a fabric connector with a notification policy on FortiSIEM to connect with FortiGate.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

When you create a user or host profile, which three criteria can you use? (Choose three.)

A. Administrative group membership

B. Host or user group memberships

C. Location

D. Host or user attributes

E. An existing access control policy

Correct Answer: B,C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

An OT supervisor has configured LDAP and FSSO for the authentication. The goal is that all the users be authenticated against passive authentication first and, if passive authentication is not successful, then users should be challenged with active authentication.
What should the OT supervisor do to achieve this on FortiGate?

A. Configure a firewall policy with LDAP users and place it on the top of list of firewall policies.

B. Enable two-factor authentication with FSSO.

C. Under config user settings configure set auth-on-demand implicit.

D. Configure a firewall policy with FSSO users and place it on the top of list of firewall policies.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)

A. Lowest to highest policy ID number

B. Source defined as internet services in the firewall policy

C. Destination defined as internet services in the firewall policy

D. Services defined in the firewall policy.

E. Highest to lowest priority defined in the firewall policy

Correct Answer: C,D,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Fortinet NSE 7 - OT Security 6.4 (NSE7_OTS-6.4) Free Practice Test