NSE6-OTS-AR-7-6Preview

Refer to the exhibit.

The Core Network Security Connectors page of the FortiGate-2 device is shown.
Which statement is correct?

Refer to the exhibit.

The OT devices behind the ruggedized FortiGate have vulnerabilities and you want to apply a virtual patching profile in the firewall policy.
Why is Virtual Patching not available in the Security Profiles section?

To improve visibility into the risks in your OT network, you would like to create a new report on FortiAnalyzer.
What must you do to create this report?

Refer to the exhibits.

A partial Basic Event Handler page on FortiAnalyzer and the creation of a trigger in a FortiGate device are shown.
To improve the protection of your OT network, you want to automate the handling of compromised devices notified through FortiAnalyzer.
You have configured an event handler as shown in the exhibit. When you create the trigger on the FortiGate device, the Event handler name field does not provide the Alert_trigger option.
What two actions must you perform to make the Alert_trigger option available? (Choose two.)

Refer to the exhibit.

A partial Application Sensor profile is shown.
When you apply this profile in a firewall policy, which two statements are correct? (Choose two.)

Which standard is the most important to OT security across all industrial sectors?

In your OT environment, you want to detect the devices passively.
Which two methods must you implement? (Choose two.)

DRAG DROP -
Match each industrial protocol to its corresponding characteristics.
Select each OT industrial protocol in the column on the left and drag and drop it into the blank space next to its corresponding characteristics in the column on the right. After matching a device type to its characteristics, you can move it again if you want to change your answer by clicking the industrial protocol name. You must match all four industrial protocols to their characteristics in the work area.

Refer to the exhibit.

A partial OT network is shown.
You must improve the security of this OT network and implement internal segmentation between network 1 and the network 2.
How can you achieve the segmentation?

Refer to the exhibit.

A Run_report task is shown.
You want to automate the generation of a newly created report on FortiAnalyzer.
When you configure the Run_report task in Playbook, why is the report not shown in the Report field? (Choose two.)

You want to improve the security of your OT network and therefore deploy a FortiGate device with the OT signatures database.
Which two statements about this database are true? (Choose two.)

In the Purdue model, at which level are physical assets like the Industrial Internet of Things (IIoT) placed?

Refer to the exhibit.

A firewall policy page is shown.
To improve the security of your OT network, you have configured a Supervisor profile in the firewall policies, as shown in the exhibit. However, a supervisor is reporting that he cannot ping PLC-1.
What are the two reasons? (Choose two.)

How are rogue devices evaluated in FortiNAC?

You want to improve access control for your large OT network using passive authentication.
What must you configure on FortiGate?

Refer to the exhibit.

A partial OT network is shown.
You have configured the FortiGate device with VLANs to segment the OT network. The supervisor now wants to connect to the PLC from the Engineering Workstation.
How can you allow access from the Engineering Workstation to the PLC?

Refer to the exhibit.

A Logical Topology page of a FortiGate device is shown.
Your OT company wants to gain visibility into the network. You decide to implement device detection with the Security Fabric.
Based on the exhibit, which statement is correct?

Refer to the exhibits.

A partial OT network and the Security Profiles section of the FortiGate_Level2 firewall policy are shown.
You have configured the FortiGate_Level2 firewall policy with a virtual patching profile because PLC-1 has vulnerabilities. A penetration test performed from the HMI device still reports vulnerabilities visible on PLC-1.
Which two additional parameters must you enable on FortiGate_Level2? (Choose two.)