- All Exams Instant Download
When you create a user or host profile, which three criteria can you use? (Choose three.)
When you create a user or host profile, which three criteria can you use? (Choose three.)A . Host or user group membershipsB . Administrative group membershipC . An existing access control policyD . LocationE . Host or user attributesView AnswerAnswer: A D E Explanation: https://docs.fortinet.com/document/fortinac/9.2.0/administration-guide/15797/user-host-profiles
Which two statements about the Modbus protocol are true? (Choose two.)
Which two statements about the Modbus protocol are true? (Choose two.)A . Modbus uses UDP frames to transport MBAP and function codes.B . Most of the PLC brands come with a built-in Modbus module.C . You can implement Modbus networking settings on internetworking devices.D . Modbus is used to establish...
Which statement about the topology is true?
Refer to the exhibit In the topology shown in the exhibit, both PLCs can communicate directly with each other, without going through the firewall. Which statement about the topology is true?A . PLCs use IEEE802.1Q protocol to communicate each other.B . An administrator can create firewall policies in the switch...
In a wireless network integration, how does FortiNAC obtain connecting MAC address information?
In a wireless network integration, how does FortiNAC obtain connecting MAC address information?A . RADIUSB . Link trapsC . End station traffic monitoringD . MAC notification trapsView AnswerAnswer: A Explanation: FortiNAC can integrate with RADIUS servers to obtain MAC address information for wireless clients that authenticate through the RADIUS server.
Which statement about the industrial signature database on FortiGate is true?
An OT supervisor needs to protect their network by implementing security with an industrial signature database on the FortiGate device. Which statement about the industrial signature database on FortiGate is true?A . A supervisor must purchase an industrial signature database and import it to the FortiGate.B . An administrator...
What must the OT admin do to prevent Layer 2-level communication between PLC-3 and CLIENT?
Refer to the exhibit. PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT can send traffic to each other at the Layer 2 level. What must the OT admin do to prevent Layer 2-level...
Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)? (Choose three.)
Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)? (Choose three.) A. FortiNAC B. FortiManager C. FortiAnalyzer D. FortiSIEM E. FortiGateView AnswerAnswer: A D E Explanation: A. FortiNAC - FortiNAC is a network access control solution that provides visibility and control over...
What are two possible reasons why the report output was empty?
An OT administrator configured and ran a default application risk and control report in FortiAnalyzer to learn more about the key application crossing the network. However, the report output is empty despite the fact that some related real-time and historical logs are visible in the FortiAnalyzer. What are two possible...
What are two critical tasks the OT network auditors must perform during OT network risk assessment and management? (Choose two.)
What are two critical tasks the OT network auditors must perform during OT network risk assessment and management? (Choose two.)A . Planning a threat hunting strategyB . Implementing strategies to automatically bring PLCs offlineC . Creating disaster recovery plans to switch operations to a backup plantD . Evaluating what can...
How can the OT network architect achieve this goal?
An OT network architect must deploy a solution to protect fuel pumps in an industrial remote network. All the fuel pumps must be closely monitored from the corporate network for any temperature fluctuations. How can the OT network architect achieve this goal?A . Configure a fuel server on the remote...
