NEW QUESTION 1
Refer to the exhibit.

Given the configurations on the FortiGate, which statement is true?

• A. FortiGate is configured with forward-domains to reduce unnecessary traffic.
• B. FortiGate is configured with forward-domains to forward only domain controller traffic.
• C. FortiGate is configured with forward-domains to forward only company domain website traffic.
• D. FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.

Answer: A

NEW QUESTION 2
Refer to the exhibit.

You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

• A. You must use a FortiAuthenticator.
• B. You must register the same FortiToken on more than one FortiGate.
• C. You must use the user self-registration server.
• D. You must use a third-party RADIUS OTP server.

Answer: A

NEW QUESTION 3
Refer to the exhibit.

You are navigating through FortiSIEM in an OT network.
How do you view information presented in the exhibit and what does the FortiGate device security status tell you?

• A. In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.
• B. In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device.
• C. In the widget dashboard and there are one or more high-severity incidents for the FortiGate device.
• D. In the business service dashboard and there are one or more high-severity security incidents for the FortiGate device.

Answer: B

NEW QUESTION 4
When you create a user or host profile, which three criteria can you use? (Choose three.)

• A. Host or user group memberships
• B. Administrative group membership
• C. An existing access control policy
• D. Location
• E. Host or user attributes

Answer: ADE

NEW QUESTION 5
Refer to the exhibit

In the topology shown in the exhibit, both PLCs can communicate directly with each other, without going
through the firewall.
Which statement about the topology is true?

• A. PLCs use IEEE802.1Q protocol to communicate each other.
• B. An administrator can create firewall policies in the switch to secure between PLCs.
• C. This integration solution expands VLAN capabilities from Layer 2 to Layer 3.
• D. There is no micro-segmentation in this topology.

Answer: D

NEW QUESTION 6
Refer to the exhibit.

Which statement about the interfaces shown in the exhibit is true?

• A. port2, port2-vlan10, and port2-vlan1 are part of the software switch interface.
• B. The VLAN ID of port1-vlan1 can be changed to the VLAN ID 10.
• C. port1-vlan10 and port2-vlan10 are part of the same broadcast domain
• D. port1, port1-vlan10, and port1-vlan1 are in different broadcast domains

Answer: D

NEW QUESTION 7
An OT administrator has configured FSSO and local firewall authentication. A user who is part of a user group is not prompted from credentials during authentication.
What is a possible reason?

• A. FortiGate determined the user by passive authentication
• B. The user was determined by Security Fabric
• C. Two-factor authentication is not configured with RADIUS authentication method
• D. FortiNAC determined the user by DHCP fingerprint method

Answer: D

NEW QUESTION 8
What are two benefits of a Nozomi integration with FortiNAC? (Choose two.)

• A. Enhanced point of connection details
• B. Direct VLAN assignment
• C. Adapter consolidation for multi-adapter hosts
• D. Importation and classification of hosts

Answer: AB

NEW QUESTION 9
An OT administrator configured and ran a default application risk and control report in FortiAnalyzer to learn more about the key application crossing the network. However, the report output is empty despite the fact that some related real-time and historical logs are visible in the FortiAnalyzer.
What are two possible reasons why the report output was empty? (Choose two.)

• A. The administrator selected the wrong logs to be indexed in FortiAnalyzer.
• B. The administrator selected the wrong time period for the report.
• C. The administrator selected the wrong devices in the Devices section.
• D. The administrator selected the wrong hcache table for the report.

Answer: BD

NEW QUESTION 10
What triggers Layer 2 polling of infrastructure devices connected in the network?

• A. A failed Layer 3 poll
• B. A matched security policy
• C. A matched profiling rule
• D. A linkup or linkdown trap

Answer: D

NEW QUESTION 11
Which three common breach points can be found in a typical OT environment? (Choose three.)

• A. Global hat
• B. Hard hat
• C. VLAN exploits
• D. Black hat
• E. RTU exploits

Answer: CDE

NEW QUESTION 12
......