Question 1

An OT network consists of multiple FortiGate devices. The edge FortiGate device is deployed as the secure gateway and is only allowing remote operators to access the ICS networks on site. Management hires a third-party company to conduct health and safety on site. The third-party company must have outbound access to external resources. As the OT network administrator, what is the best scenario to provide external access to the third-party company while continuing to secure the ICS networks?

Options :

A :

Configure outbound security policies with limited active authentication users of the third-party company.

B :

Create VPN tunnels between downstream FortiGate devices and the edge FortiGate to protect ICS network traffic.

C :

Split the edge FortiGate device into multiple logical devices to allocate an independent VDOM for the third-party company.

D : Implement an additional firewall using an additional upstream link to the internet.

Answer: C

Question 2

What are two benefits of a Nozomi integration with FortiNAC? (Choose two.)

Options :

A : Enhanced point of connection details

B : Direct VLAN assignment

C : Adapter consolidation for multi-adapter hosts

D : Importation and classification of hosts

Answer: A,D

Question 3

An OT network administrator is trying to implement active authentication. Which two methods should the administrator use to achieve this? (Choose two.)

Options :

A : Two-factor authentication on FortiAuthenticator

B : Role-based authentication on FortiNAC

C : FSSO authentication on FortiGate

D : Local authentication on FortiGate

Answer: A,D

Question 4

Refer to the exhibit.

You are navigating through FortiSIEM in an OT network. How do you view information presented in the exhibit and what does the FortiGate device security status tell you?

Options :

A :

In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.

B :

In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device.

C : In the widget dashboard and there are one or more high-severity incidents for the FortiGate device.

D :

In the business service dashboard and there are one or more high-severity security incidents for the FortiGate device.

Answer: B

Question 5

When you create a user or host profile, which three criteria can you use? (Choose three.)

Options :

A : Host or user group memberships

B : Administrative group membership

C : An existing access control policy

D : Location

E : Host or user attributes

Answer: A,D,E