NSE6-OTS-AR-7-6: NSE 6 - OT Security 7.6 ArchitectDemo

By Fortinet · Question Mode

QuestionQ7

Network security

Refer to the exhibit.

Question Image

A partial Application Sensor profile is displayed. When you apply this profile to a firewall policy, which two statements are correct?

Choose two
  • A OT signatures are enabled.
  • B All OT protocols are monitored.
  • C Modbus write commands are blocked.
  • D A log is provided for each Modbus read holding registers command.
Explanation

The Operational Technology category is configured with a monitoring action, which enables its application signatures. The higher-priority Allow override for Modbus_Read.Holding.Registers creates a specific exception to the lower-priority Block override for Modbus; Modbus write commands therefore match the Block rule. Application-control category filters and overrides support distinct actions, including Monitor, Allow, and Block.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!