Fortinet NSE6_OTS_AR-7.6 問題集

質問 1：
As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect protocols from PLCs.
Which security sensor must you implement to detect protocols on the OT network?
A. Deep packet inspection (DPI)
B. Application control (AC)
C. Intrusion prevention system (IPS)
D. Antivirus inspection
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Refer to the exhibit. From your analysis of the output, which statement about the output is true?

A. This is a sample of a PAM event type.
B. This is a sample of a FortiAnalyzer system interface event log.
C. This is a sample of FortiGate interface statistics.
D. This is a sample of an SNMP temperature control event log.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
How can you achieve remote access and internel availability in an OT network?
A. Create a back-end backup network as a redundancy measure.
B. Create more access policies to prevent unauthorized access.
C. Implement SD-WAN to manage traffic on each ISP link.
D. Add additional internal firewalls to access OT devices.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 4：
In a wireless network integration, how does FortiNAC obtain connecting MAC address information?
A. MAC notification traps
B. RADIUS
C. Link traps
D. End station traffic monitoring
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 5：
In your OT environment, you want to detect the devices passively. Which two methods must you implement? (Choose two.)
A. SSH
B. Vendor OUI
C. SNMP
D. Network traffic
正解：B,D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which deployment option allows an administrator to detect intrusions without any modifications to production traffic?
A. Virtual patching
B. Offline IPS
C. Offline IDS
D. Inline IPS and IDS
正解：C

質問 7：
Refer to the exhibit. You are creating a new operational technology (OT) rule to monitor Modbus protocol traffic on FortiSIEM.
Which action must you take to ensure that all Modbus messages on the network match the rule?

A. The condition on the SubPattern filter must use the AND logical operator.
B. In the Group By section, remove all attributes that are not configured in the Filter section.
C. Add a new condition to filter Modbus traffic based on the source TCP/UDP port.
D. In the Aggregate section, set the attribute value to equal to or greater than 0.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
An OT supervisor needs to protect their network by implementing security with an industrial signature database on the FortiGate device.
Which statement about the industrial signature database on FortiGate is true?
A. A supervisor can enable it through the FortiGate CLI.
B. By default, the industrial database is enabled.
C. A supervisor must purchase an industrial signature database and import it to the FortiGate.
D. An administrator must create their own database using custom signatures.
正解：A

質問 9：
Refer to the exhibit.

Which statement about this partial Asset Identity List page is correct? (Choose one answer)
A. A firewall policy has an Application Control security profile applied to it.
B. A firewall policy has an Antivirus security profile applied to it.
C. A firewall policy has a Virtual Patching security profile applied to it.
D. A firewall policy has an Intrusion Prevention security profile applied to it.
正解：C
解説: (Topexam メンバーにのみ表示されます)