Latest Sep-2026 NSE6_OTS_AR-7.6 Dumps PDF And Certification Training [Q38-Q54]

Rate this post

Latest Sep-2026 NSE6_OTS_AR-7.6 Dumps PDF And Certification Training

Check your preparation for Fortinet NSE6_OTS_AR-7.6 On-Demand Exam

Fortinet NSE6_OTS_AR-7.6 Exam Syllabus Topics:

Topic	Details
Topic 1	Network access control: Focuses on OT Ethernet fundamentals and designing secure network segmentation strategies. It also includes configuring authentication methods to control and verify access to the OT network.
Topic 2	Network security: Explains how to apply security inspections specifically for industrial protocols and implement virtual patching to protect vulnerable systems. It also includes configuring automation to enhance threat response and operational efficiency.
Topic 3	Monitoring and risk assessment: Covers creating event handlers in FortiAnalyzer to monitor network activity and detect threats. It also includes performing risk assessments and analyzing security reports to support ongoing risk management.
Topic 4	Asset management: Covers understanding OT standards and how Fortinet aligns with compliance requirements in industrial environments. It also includes using the Fortinet Security Fabric to manage assets and implementing device detection using FortiGate and FortiNAC.

NEW QUESTION 38
What triggers Layer 2 polling of infrastructure devices connected in the network?

A failed Layer 3 poll

A matched security policy

A matched profiling rule

A linkup or linkdown trap

NEW QUESTION 39
Refer to the exhibit.

A simplified OT network is shown. You want to optimize the protection of this OT network. Which two controls must you implement? (Choose two answers)

Offline IDS on FortiGate_Level3.

IPS on FortiGate_Level5.

Virtual patching on FortiGate_Level2.

OT signature on FortiGate_Level5.

NEW QUESTION 40
Refer to the exhibit. An operational technology rule is created and successfully activated to monitor the Modbus protocol on FortiSIEM. However, the rule does not trigger incidents despite Modbus traffic and application logs being received correctly by FortiSIEM.
Which statement correctly describes the issue on the rule configuration?

The first condition on the SubPattern filter must use the OR logical operator.

The attributes in the Group By section must match the ones in Fitters section.

The Aggregate attribute COUNT expression is incompatible with the filters.

The SubPattern is missing the filter to match the Modbus protocol.

NEW QUESTION 41
Refer to the exhibit. An OT architect has implemented a Modbus TCP with a simulation server Conpot to identify and control the Modus traffic in the OT network. The FortiGate-Edge device is configured with a software switch interface ssw-01.
Based on the topology shown in the exhibit, which two statements about the successful simulation of traffic between client and server are true? (Choose two.)

The FortiGate-Edge device must be in NAT mode.

NAT is disabled in the FortiGate firewall policy from port3 to ssw-01.

The FortiGate devices is in offline IDS mode.

Port5 is not a member of the software switch.

NEW QUESTION 42
In a wireless network integration, how does FortiNAC obtain connecting MAC address information?

RADIUS

Link traps

End station traffic monitoring

MAC notification traps

NEW QUESTION 43
An OT administrator deployed many devices to secure the OT network. However, the SOC team is reporting that there are too many alerts, and that many of the alerts are false positive. The OT administrator would like to find a solution that eliminates repetitive tasks, improves efficiency, saves time, and saves resources.
Which products should the administrator deploy to address these issues and automate most of the manual tasks done by the SOC team?

FortiSIEM and FortiManager

A syslog server and FortiSIEM

FortiSOAR and FortiSIEM

FortiSandbox and FortiSIEM

NEW QUESTION 44
Refer to the exhibit. A Security Fabric logical topology view is shown. Which two statements are correct? (Choose two.)

Edge-FortiGate, FortiGate-1, and FortiGate-2 have the Security Fabric configured.

Device detection is enabled on port5 of the Edge-FortiGate device.

FortiAnalyzer is connected only to Edge-FortiGate.

FortiAnalyzer has the Security Fabric configured.

NEW QUESTION 45
Which type of attack posed by skilled and malicious users of security level 4 (SL 4) of IEC 62443 is designed to defend against intentional attacks?

Users with access to moderate resources

Users with low access to resources

Users with unintentional operator error

Users with substantial resources

NEW QUESTION 46
Refer to the exhibit. The network topology in the exhibit shows FortiGate devices as well as FortiAnalyzer and FortiSIEM for the OT network.
Which two steps must you take to configure logging on the OT network’? (Choose two.)

Configure FortiSIEM to send logs and alerts to FortiAnalyzer.

Configure FortiGate to send logs to FortiAnalyzer and FortiSIEM.

Configure FortiAnalyzer to send security events to FortiSIEM.

Configure FortiGate and FortiAnalyzer to send industrial signature patterns to FortiSIEM.

NEW QUESTION 47
Refer to the exhibit. From your analysis of the output, which statement about the output is true?

This is a sample of a FortiAnalyzer system interface event log.

This is a sample of an SNMP temperature control event log.

This is a sample of a PAM event type.

This is a sample of FortiGate interface statistics.

NEW QUESTION 48
Refer to the exhibit. Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.

Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.

IT and OT networks are separated by segmentation.

FortiGate-3 and FortiGate-4 devices must be in a transparent mode.

NEW QUESTION 49
Refer to the exhibit. PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-2) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT can send traffic to each other at the layer 2 level.
What must the operational technology (OT) admin do to prevent layer 2-level communication between PLC-3 and CLIENT?

Set a unique forward domain for each interface of the software switch.

Create a VLAN for each device and replace the current FGT-2 software switch members.

Enable explicit intra-switch policy to require firewall policies on FGT-2.

Implement policy routes on FGT-2 to control traffic between devices.

NEW QUESTION 50
An OT network architect needs to secure control area zones with a single network access policy to provision devices to any number of different networks. On which device can this be accomplished?

FortiGate

FortiEDR

FortiSwitch

FortiNAC

NEW QUESTION 51
Which two frameworks are common to secure ICS industrial processes, including SCADA and DCS? (Choose two.)

Modbus

NIST Cybersecurity

IEC 62443

IEC 104

NEW QUESTION 52
Refer to the exhibit.

Based on the information provided on the partial Event Monitor page shown in the exhibit, how was the attack detected? (Choose one answer)

Automatically by a stitch

Manually by an administrator

Automatically by a playbook

Automatically by an event handler

NEW QUESTION 53
Refer to the exhibit.

A partial OT network is shown. You want to provide the supervisor with secure remote access. Which two features can you implement on Edge-FortiGate? (Choose two answers)

IPsec

FortiToken

SD-WAN

FSSO

NEW QUESTION 54
An organization has deployed an entry-level FortiGate device in their operational technology (OT) network. The administrator is looking for a simple solution to detect and block all network intrusions in that specific part of the network without any false positive activities.
Which solution should the administrator use to achieve this goal?

Configure a local-in firewall policy.

Block all foreign inbound traffic.

Enable intrusion prevention system (IPS) and use the regular signature database.

Enable the industrial signature database in the IPS global setting.