EMT Practice Test

1. Question Content...

---

Question1: Refer to the exhibit.

An OT administrator ran a report to identify device inventory in an OT network.
Based on the report results, which report was run?

Question2: When device profiling rules are enabled, which devices connected on the network are evaluated by the device profiling rules?

Question3: What can be assigned using network access control policies?

Question4: Refer to the exhibit.

You are navigating through FortiSIEM in an OT network.
How do you view information presented in the exhibit and what does the FortiGate device security status tell you?

Question5: Refer to the exhibit.

You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

Question6: What two advantages does FortiNAC provide in the OT network? (Choose two.)

Question7: You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM.
Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)

Question8: Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)? (Choose three.)

Question9: An OT network administrator is trying to implement active authentication.
Which two methods should the administrator use to achieve this? (Choose two.)

Question10: An OT administrator has configured FSSO and local firewall authentication. A user who is part of a user group is not prompted from credentials during authentication.
What is a possible reason?

Question11: An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.
Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

Question12: An OT administrator is defining an incident notification policy using FortiSIEM and would like to configure the system with a notification policy. If an incident occurs, the administrator would like to be able to intervene and block an IP address or disable a user in Active Directory from FortiSIEM.
Which step must the administrator take to achieve this task?