QUESTION 36
Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic?
(Choose three.)

QUESTION 37
Refer to the exhibits. Which statement about some of the generated report elements from FortiAnalyzer is true?

QUESTION 38
An OT network administrator is trying to implement active authentication.
Which two methods should the administrator use to achieve this? (Choose two.)

QUESTION 39
Refer to the exhibit.

You are creating a new operational technology (OT) rule to monitor Modbus protocol traffic on FortiSIEM Which action must you take to ensure that all Modbus messages on the network match the rule?

QUESTION 40
An OT supervisor has configured LDAP and FSSO for the authentication. The goal is that all the users be authenticated against passive authentication first and, if passive authentication is not successful, then users should be challenged with active authentication.
What should the OT supervisor do to achieve this on FortiGate?

QUESTION 41
How can you achieve remote access and internel availability in an OT network?

QUESTION 42
Refer to the exhibit. Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

QUESTION 43
Refer to the exhibit.
An OT architect has implemented a Modbus TCP with a simulation server Conpot to identify and control the Modus traffic in the OT network. The FortiGate-Edge device is configured with a software switch interface ssw-01.
Based on the topology shown in the exhibit, which two statements about the successful simulation of traffic between client and server are true? (Choose two.)

QUESTION 44
Which two statements about FortiSIEM are true? (Choose two.)

QUESTION 45
Refer to the exhibit.
Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)

QUESTION 46
Refer to the exhibits.

Which statement about some of the generated report elements from FortiAnalyzer is true?

QUESTION 47
Refer to the exhibit.
An OT administrator ran a report to identify device inventory in an OT network.
Based on the report results, which report was run?

QUESTION 48
Refer to the exhibit.

Which statement about the interfaces shown in the exhibit is true?

QUESTION 49
In a wireless network integration, how does FortiNAC obtain connecting MAC address information?

QUESTION 50
How can you achieve remote access and internet availability in an OT network?

QUESTION 51
An OT administrator configured and ran a default application risk and control report in FortiAnalyzer to learn more about the key application crossing the network. However, the report output is empty despite the fact that some related real-time and historical logs are visible in the FortiAnalyzer.
What are two possible reasons why the report output was empty? (Choose two.)

QUESTION 52
Refer to the exhibit.

You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

QUESTION 53
As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect exploits that affect PLCs.
Which security sensor must implement to detect these types of industrial exploits?

QUESTION 54
Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic?
(Choose three.)

QUESTION 55
Refer to the exhibit and analyze the output.

Which statement about the output is true?