NSE6_OTS_AR-7.6 試験問題を無料オンラインアクセス

Which type of attack posed by skilled and malicious users of security level 4 (SL 4) of IEC 62443 is designed to defend against intentional attacks?

• A.Users with substantial resources
• B.Users with access to moderate resources
• C.Users with low access to resources
• D.Users with unintentional operator error

Refer to the exhibit. You are creating a new operational technology (OT) rule to monitor Modbus protocol traffic on FortiSIEM.
Which action must you take to ensure that all Modbus messages on the network match the rule?

• A.The condition on the SubPattern filter must use the AND logical operator.
• B.In the Aggregate section, set the attribute value to equal to or greater than 0.
• C.Add a new condition to filter Modbus traffic based on the source TCP/UDP port.
• D.In the Group By section, remove all attributes that are not configured in the Filter section.

An OT architect has deployed a Layer 2 switch in the OT network at Level 1 in the Purdue model- process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs.
All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.
Which statement about the traffic between PLC1 and PLC2 is true?

• A.In order to communicate, PLC1 must be in the same VLAN as PLC2.
• B.The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.
• C.The FortiGate must be configured as a "Router on a stick" for intra-PLC communication.
• D.The Layer 2 switch routes any traffic to the FortiGate device through an Ethernet link.

Refer to the exhibit. The IPS profile is added on all of the security policies on FortiGate. For an OT network, which statement of the IPS profile is true?

• A.The IPS profile inspects only traffic originating from SCADA equipment.
• B.FortiGate has no IPS industrial signature database enabled.
• C.The listed IPS signatures are classified as SCADA applications.
• D.All IPS signatures are overridden and must block traffic match signature patterns.

Which two of the following features do most industrial protocols lack? (Choose two.)

• A.Authentication
• B.Deterministic timing
• C.TLS encryption
• D.Real-time data exchange