An OT administrator is defining an incident notification policy using FortiSIEM and would like to configure the system with a notification policy. If an incident occurs, the administrator would like to be able to intervene and block an IP address or disable a user in Active Directory from FortiSIEM.
Which step must the administrator take to achieve this task?

• A.Configure a fabric connector with a notification policy on FortiSIEM to connect with FortiGate.
• B.Create a notification policy and define a script/remediation on FortiSIEM.
• C.Define a script/remediation on FortiManager and enable a notification rule on FortiSIEM.
• D.Deploy a mitigation script on Active Directory and create a notification policy on FortiSIEM.

Comment: *

Name: *

Email: *

Verification: *

As an OT administrator, it is important to understand how industrial protocols work in an OT network.
Which communication method is used by the Modbus protocol?

• A.It uses OSI Layer 2 and both the primary/secondary devices always send data during the communication.
• B.It uses OSI Layer 2 and both the primary/secondary devices send data based on a matching token ring.
• C.It uses OSI Layer 2 and the secondary device sends data based on request from primary device.
• D.It uses OSI Layer 2 and the primary device sends data based on request from secondary device.

Comment: *

Name: *

Email: *

Verification: *

An OT network architect needs to secure control area zones with a single network access policy to provision devices to any number of different networks.
On which device can this be accomplished?

• A.FortiGate
• B.FortiEDR
• C.FortiSwitch
• D.FortiNAC

Comment: *

Name: *

Email: *

Verification: *

What triggers Layer 2 polling of infrastructure devices connected in the network?

• A.A matched profiling rule
• B.A matched security policy
• C.A failed Layer 3 poll
• D.A linkup or linkdown trap

Comment: *

Name: *

Email: *

Verification: *

An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.
Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

• A.You must set correct operator in event handler to trigger an event.
• B.Each playbook can include multiple triggers.
• C.You can automate SOC tasks through playbooks.
• D.You cannot use Windows and Linux hosts security events with FortiSoC.

Comment: *

Name: *

Email: *

Verification: *