Question 1

What are two benefits of a Nozomi integration with FortiNAC? (Choose two.)

Options :

A : Enhanced point of connection details

B : Direct VLAN assignment

C : Adapter consolidation for multi-adapter hosts

D : Importation and classification of hosts

Answer: A,D

Question 2

When you create a user or host profile, which three criteria can you use? (Choose three.)

Options :

A : Host or user group memberships

B : Administrative group membership

C : An existing access control policy

D : Location

E : Host or user attributes

Answer: A,D,E

Question 3

Refer to the exhibit.

You are navigating through FortiSIEM in an OT network. How do you view information presented in the exhibit and what does the FortiGate device security status tell you?

Options :

A :

In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.

B :

In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device.

C : In the widget dashboard and there are one or more high-severity incidents for the FortiGate device.

D :

In the business service dashboard and there are one or more high-severity security incidents for the FortiGate device.

Answer: B

Question 4

An OT supervisor has configured LDAP and FSSO for the authentication. The goal is that all the users be authenticated against passive authentication first and, if passive authentication is not successful, then users should be challenged with active authentication.

What should the OT supervisor do to achieve this on FortiGate?

Options :

A : Configure a firewall policy with LDAP users and place it on the top of list of firewall policies.

B : Enable two-factor authentication with FSSO.

C : Configure a firewall policy with FSSO users and place it on the top of list of firewall policies.

D : Under config user settings configure set auth-on-demand implicit.

Answer: C

Question 5

What two advantages does FortiNAC provide in the OT network? (Choose two.)

Options :

A : It can be used for IoT device detection.

B : It can be used for industrial intrusion detection and prevention.

C : It can be used for network micro-segmentation.

D : It can be used for device profiling.

Answer: A,D

Smartly Prepare Exam with Free Online NSE7_OTS-7.2 Practice Test

Buying Options: