NSEI_OTS_AR-7.6 무료 덤프문제 온라인 액세스

Refer to the exhibit.

A simplified OT network is shown. You want to optimize the protection of this OT network. Which two controls must you implement? (Choose two answers)

• A.IPS on FortiGate_Level5.
• B.Offline IDS on FortiGate_Level3.
• C.Virtual patching on FortiGate_Level2.
• D.OT signature on FortiGate_Level5.

Refer to the exhibit.

A partial legacy OT network is shown.
You must improve this historically flat OT network and minimize the risk of lateral movement.
Which action must you perform?

• A.You must add two-factor authentication.
• B.You must segment the network with a hardware switch.
• C.You must implement micro-segmentation with firewall policies.
• D.You must implement SD-WAN.

Refer to the exhibit.

The OT devices behind the ruggedized FortiGate have vulnerabilities and you want to apply a virtual patching profile in the firewall policy. Why is Virtual Patching not available in the Security Profiles section? (Choose one answer)

• A.You must enable OT signatures.
• B.You must have a valid OT security service license.
• C.You must have a ruggedized FortiGate allowing the virtual patching feature.
• D.You must enable Virtual Patching in the Feature Visibility section.

Refer to the exhibit.

The configuration of firewall policies is shown.
To improve the security of your OT network, you have configured authentication in the firewall policies as shown in the exhibit, with CLI parameters set to their default settings. However, when you test HTTPS access from the LAN subnet to PLC-1, it is successful without any authentication prompt.
What is the reason?

• A.You are passively authenticated.
• B.You must first authenticate using a protocol such as HTTP or Telnet.
• C.You are authenticated with the default implicit firewall policy.
• D.You did not configure authentication in firewall policy ID 9.

How are rogue devices evaluated in FortiNAC? (Choose one answer)

• A.Through the local device database (CIDB)
• B.Through queries to FortiGuard servers
• C.Through the import of the devices list
• D.Through device profiling rules