[UPDATED] Fortinet NSE7_OTS-6.4 Certification Exam Questions [Q19-Q34]

4/5 - (1 vote)

[UPDATED] Fortinet NSE7_OTS-6.4 Certification Exam Questions

Quickly and Easily Pass Fortinet Exam with NSE7_OTS-6.4 real Dumps

The Fortinet NSE7_OTS-6.4 exam covers a wide range of topics related to OT security, including ICS and SCADA security, threat detection and prevention, network security, endpoint security, data protection, and compliance. NSE7_OTS-6.4 exam is designed to test the candidate’s knowledge and skills in these areas and to ensure that they have the necessary skills to secure OT systems.

Fortinet NSE7_OTS-6.4 Certification Exam is a vendor-neutral certification that is recognized globally. Passing this certification exam demonstrates that an individual has the knowledge and skills required to design, implement, and manage secure OT environments. Fortinet NSE 7 – OT Security 6.4 certification is particularly valuable for individuals working in industries such as energy, manufacturing, and transportation where OT systems play a critical role in daily operations. It is also a great way for IT professionals to enhance their skills and advance their careers in the field of cybersecurity.

QUESTION 19
Refer to the exhibit, which shows a non-protected OT environment.

An administrator needs to implement proper protection on the OT network.
Which three steps should an administrator take to protect the OT network? (Choose three.)

Deploy an edge FortiGate between the internet and an OT network as a one-arm sniffer.

Deploy a FortiGate device within each ICS network.

Configure firewall policies with web filter to protect the different ICS networks.

Configure firewall policies with industrial protocol sensors

Use segmentation

QUESTION 20
An OT supervisor has configured LDAP and FSSO for the authentication. The goal is that all the users be authenticated against passive authentication first and, if passive authentication is not successful, then users should be challenged with active authentication.
What should the OT supervisor do to achieve this on FortiGate?

Configure a firewall policy with LDAP users and place it on the top of list of firewall policies.

Enable two-factor authentication with FSSO.

Configure a firewall policy with FSSO users and place it on the top of list of firewall policies.

Under config user settings configure set auth-on-demand implicit.

The OT supervisor should configure a firewall policy with FSSO users and place it on the top of list of firewall policies in order to achieve the goal of authenticating users against passive authentication first and, if passive authentication is not successful, then challenging them with active authentication.

QUESTION 21
Refer to the exhibit.

Which statement about the interfaces shown in the exhibit is true?

port2, port2-vlan10, and port2-vlan1 are part of the software switch interface.

The VLAN ID of port1-vlan1 can be changed to the VLAN ID 10.

port1-vlan10 and port2-vlan10 are part of the same broadcast domain

port1, port1-vlan10, and port1-vlan1 are in different broadcast domains

QUESTION 22
An OT administrator has configured FSSO and local firewall authentication. A user who is part of a user group is not prompted from credentials during authentication.
What is a possible reason?

FortiGate determined the user by passive authentication

The user was determined by Security Fabric

Two-factor authentication is not configured with RADIUS authentication method

FortiNAC determined the user by DHCP fingerprint method

QUESTION 23
What can be assigned using network access control policies?

Layer 3 polling intervals

FortiNAC device polling methods

Logical networks

Profiling rules

QUESTION 24
An OT architect has deployed a Layer 2 switch in the OT network at Level 1 the Purdue model-process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs. All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.
What statement about the traffic between PLC1 and PLC2 is true?

The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.

The Layer 2 switches routes any traffic to the FortiGate device through an Ethernet link.

PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.

In order to communicate, PLC1 must be in the same VLAN as PLC2.

QUESTION 25
An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.
Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

You must set correct operator in event handler to trigger an event.

Each playbook can include multiple triggers.

You can automate SOC tasks through playbooks.

You cannot use Windows and Linux hosts security events with FortiSoC.

Ref: https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/268882/fortisoc

QUESTION 26
Refer to the exhibit.

Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)

FortiGate for SD-WAN

FortiGate for application control and IPS

FortiNAC for network access control

FortiSIEM for security incident and event management

FortiEDR for endpoint detection

QUESTION 27
Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)? (Choose three.)

FortiNAC

FortiManager

FortiAnalyzer

FortiSIEM

FortiGate

1. FortiNAC – FortiNAC is a network access control solution that provides visibility and control over network devices. It can identify devices, enforce access policies, and automate threat response.
2. FortiSIEM – FortiSIEM is a security information and event management solution that can collect and analyze data from multiple sources, including network devices and servers. It can help identify potential security threats, as well as monitor compliance with security policies and regulations.
3. FortiAnalyzer – FortiAnalyzer is a central logging and reporting solution that collects and analyzes data from multiple sources, including FortiNAC and FortiSIEM. It can provide insights into network activity and help identify anomalies or security threats.
Reference:
Fortinet NSE 7 – OT Security 6.4 Study Guide, Chapter 4: OT Security Devices, page 4-20.

QUESTION 28
Refer to the exhibit.

You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

You must use a FortiAuthenticator.

You must register the same FortiToken on more than one FortiGate.

You must use the user self-registration server.

You must use a third-party RADIUS OTP server.

QUESTION 29
In a wireless network integration, how does FortiNAC obtain connecting MAC address information?

RADIUS

Link traps

End station traffic monitoring

MAC notification traps

QUESTION 30
Refer to the exhibit.

Given the configurations on the FortiGate, which statement is true?

FortiGate is configured with forward-domains to reduce unnecessary traffic.

FortiGate is configured with forward-domains to forward only domain controller traffic.

FortiGate is configured with forward-domains to forward only company domain website traffic.

FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.

QUESTION 31
What two advantages does FortiNAC provide in the OT network? (Choose two.)

It can be used for IoT device detection.

It can be used for industrial intrusion detection and prevention.

It can be used for network micro-segmentation.

It can be used for device profiling.

Typically, in a microsegmented network, NGFWs are used in conjunction with VLANs to implement security policies and to inspect and filter network communications. Fortinet FortiSwitch and FortiGate NGFW offer an integrated approach to microsegmentation.

QUESTION 32
Refer to the exhibit.

Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.

Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.

IT and OT networks are separated by segmentation.

FortiGate-3 and FortiGate-4 devices must be in a transparent mode.

QUESTION 33
When you create a user or host profile, which three criteria can you use? (Choose three.)

Host or user group memberships

Administrative group membership

An existing access control policy

Location

Host or user attributes

https://docs.fortinet.com/document/fortinac/9.2.0/administration-guide/15797/user-host-profiles

QUESTION 34
Refer to the exhibit.

An OT administrator ran a report to identify device inventory in an OT network.
Based on the report results, which report was run?