Fortinet NSE6_OTS_AR-7.6 問題集

質問 1：
Refer to the exhibit. An operational technology (OT) network security audit concluded that the application sensor does not block the IEC.60870.5.104_Information.Trasfer.C.BO.NA.1 signature.
Which change must the OT network administrator make?

A. Remove IEC.60870.5.104_Information.Transfer.C.BO.NA.1 from the first filter override.
B. Set all application categories to apply default actions.
C. Update the priority of the C.BO.NA.1 signature override to 1.
D. Change the security action of the industrial category to monitor.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 2：
With the limit of using one firewall device, the administrator enables multi-VDOM on FortiGate to provide independent multiple security domains to each ICS network.
Which statement ensures security protection is in place for all ICS networks?
A. The management VDOM must have access to all global security services.
B. Each VDOM must have an independent security license.
C. Each traffic VDOM must have a direct connection to FortiGuard services to receive the required security updates.
D. Traffic between VDOMs must pass through the physical interfaces of FortiGate to check for security incidents.
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 3：
Which standard is the most important to OT security across all industrial sectors?
A. HIPAA
B. IEC 62443
C. NIST CSF
D. GDPR
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
To increase security protection in an OT network, how does application control on ForliGate detect industrial traffic?
A. By inspecting software and software-based vulnerabilities
B. By inspecting applications only on nonprotected traffic
C. By inspecting protocols used in the application traffic
D. By inspecting applications with more granularity by inspecting subapplication traffic
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Which three common breach points can you find in a typical OT environment? (Choose three.)
A. Black hat
B. VLAN exploits
C. Hard hat
D. RTU exploits
E. Global hat
正解：A,C,D
解説: (Topexam メンバーにのみ表示されます)

質問 6：
An organization has deployed an entry-level FortiGate device in their operational technology (OT) network. The administrator is looking for a simple solution to detect and block all network intrusions in that specific part of the network without any false positive activities.
Which solution should the administrator use to achieve this goal?
A. Enable intrusion prevention system (IPS) and use the regular signature database.
B. Block all foreign inbound traffic.
C. Configure a local-in firewall policy.
D. Enable the industrial signature database in the IPS global setting.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
You want to automate some tasks in your OT network. Which three configurations are directly available in a new basic event handler on FortiAnalyzer? (Choose three.)
A. Create a report
B. Send alert email
C. Automation stitch
D. Automatically create an incident
E. Quarantine an attacker
正解：B,C,D
解説: (Topexam メンバーにのみ表示されます)

質問 8：
Which type of attack posed by skilled and malicious users of security level 3 (SL 3) of IEC 62443 is designed to defend against intentional attacks?
A. Low access to resources
B. Substantial resources
C. Access to moderate resources
D. Unintentional operator error
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 9：
Refer to the exhibit. A partial OT network is shown.

In this OT network, you must add additional security measures to detect OT protocols and, therefore, increase the traffic visibility.
Which security sensor must you implement to detect the OT protocols in this network? (Choose one answer)
A. Application sensor set to monitor on all the FortiGate devices
B. IPS sensor on FortiGate Level5
C. Device detection on all the FortiGate interfaces
D. Inline IDS on FortiGate_Level3
正解：A