Refer to the exhibit.

Given the configurations on the FortiGate, which statement is true?

• A.FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.
• B.FortiGate is configured with forward-domains to forward only domain controller traffic.
• C.FortiGate is configured with forward-domains to forward only company domain website traffic.
• D.FortiGate is configured with forward-domains to reduce unnecessary traffic.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

• A.You must use a third-party RADIUS OTP server.
• B.You must use the user self-registration server.
• C.You must use a FortiAuthenticator.
• D.You must register the same FortiToken on more than one FortiGate.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit

In the topology shown in the exhibit, both PLCs can communicate directly with each other, without going through the firewall.
Which statement about the topology is true?

• A.This integration solution expands VLAN capabilities from Layer 2 to Layer 3.
• B.An administrator can create firewall policies in the switch to secure between PLCs.
• C.There is no micro-segmentation in this topology.
• D.PLCs use IEEE802.1Q protocol to communicate each other.

Comment: *

Name: *

Email: *

Verification: *

An OT supervisor needs to protect their network by implementing security with an industrial signature database on the FortiGate device.
Which statement about the industrial signature database on FortiGate is true?

• A.An administrator must create their own database using custom signatures.
• B.By default, the industrial database is enabled.
• C.A supervisor can enable it through the FortiGate CLI.
• D.A supervisor must purchase an industrial signature database and import it to the FortiGate.

Comment: *

Name: *

Email: *

Verification: *

An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.
Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

• A.You must set correct operator in event handler to trigger an event.
• B.You can automate SOC tasks through playbooks.
• C.Each playbook can include multiple triggers.
• D.You cannot use Windows and Linux hosts security events with FortiSoC.

Comment: *

Name: *

Email: *

Verification: *