[2026] Get Top-Rated Fortinet NSE6_OTS_AR-7.6 Exam Dumps Now [Q41-Q62]

Rate this post

[2026] Get Top-Rated Fortinet NSE6_OTS_AR-7.6 Exam Dumps Now

Passing Key To Getting NSE6_OTS_AR-7.6 Certified Exam Engine PDF

Fortinet NSE6_OTS_AR-7.6 Exam Syllabus Topics:

Topic	Details
Topic 1	Monitoring and risk assessment: Covers creating event handlers in FortiAnalyzer to monitor network activity and detect threats. It also includes performing risk assessments and analyzing security reports to support ongoing risk management.
Topic 2	Network access control: Focuses on OT Ethernet fundamentals and designing secure network segmentation strategies. It also includes configuring authentication methods to control and verify access to the OT network.
Topic 3	Asset management: Covers understanding OT standards and how Fortinet aligns with compliance requirements in industrial environments. It also includes using the Fortinet Security Fabric to manage assets and implementing device detection using FortiGate and FortiNAC.
Topic 4	Network security: Explains how to apply security inspections specifically for industrial protocols and implement virtual patching to protect vulnerable systems. It also includes configuring automation to enhance threat response and operational efficiency.

NEW QUESTION 41
Refer to the exhibit. A Security Fabric logical topology view is shown. Which two statements are correct? (Choose two.)

Edge-FortiGate, FortiGate-1, and FortiGate-2 have the Security Fabric configured.

Device detection is enabled on port5 of the Edge-FortiGate device.

FortiAnalyzer is connected only to Edge-FortiGate.

FortiAnalyzer has the Security Fabric configured.

NEW QUESTION 42
For the installation of your first FortiGate device, you want to minimize the impact in your OT network.
Therefore, you deploy it initially as an offline IDS. Which two statements about this deployment are correct?
(Choose two answers)

The FortiGate device acts as a network sensor.

The cybersecurity visibility increases with the security profiles.

Attacks, including zero-day attacks, are blocked.

OT traffic flows through the FortiGate device.

NEW QUESTION 43
As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect protocols from PLCs.
Which security sensor must you implement to detect protocols on the OT network?

Intrusion prevention system (IPS)

Deep packet inspection (DPI)

Antivirus inspection

Application control (AC)

NEW QUESTION 44
Refer to the exhibits.

A partial Basic Event Handler page on FortiAnalyzer and the creation of a trigger in a FortiGate device are shown. To improve the protection of your OT network, you want to automate the handling of compromised devices notified through FortiAnalyzer. You have configured an event handler named Alert_trigger as shown in the exhibit. When you create the trigger on the FortiGate device, the Event handler name field does not provide the Alert_trigger option. What two actions must you perform to make the Alert_trigger option available? (Choose two answers)

You must click + Create in the Event handler name field.

You must authorize the FortiGate device on FortiAnalyzer.

You must configure the FortiAnalyzer setting on the FortiGate device.

You must configure the trigger on the root FortiGate.

NEW QUESTION 45
Refer to the exhibit. You need to configure VPN user access for supervisors at the branch and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

Direct users to the self-registration server portal.

Import the FortiToken on each FortiGate.

Deploy FortiAuthenticator.

Use a RADIUS OTP server.

NEW QUESTION 46
FortiAnalyzer is implemented in the OT network to receive logs from responsible FortiGate devices. The logs must be processed by FortiAnalyzer.
In this scenario, which statement is correct about the purpose of FortiAnalyzer receiving and processing multiple log messages from a given PLC or RTU?

To isolate PLCs or RTUs in the event of external attacks

To configure event handlers and take further action on FortiGate

To determine which type of messages from the PLC or RTU causes issues in the plant

To help OT administrators configure the network and prevent breaches

NEW QUESTION 47
How are rogue devices evaluated in FortiNAC?

Through device profiling rules

Through queries to FortiGuard servers

Through the import of the devices list

Through the local device database (CIDB)

NEW QUESTION 48
A supervisor is configuring a software switch on a FortiGate device. What must the supervisor configure on FortiGate to control the traffic between member interfaces on the software switch, using firewall policies?

The supervisor must add different VLAN interfaces to the software switch.

The supervisor must configure the software switch with at least one wireless interface and one VLAN interface.

The supervisor must configure a separate forward domain for the software switch.

The supervisor must configure intra-switch-policy to explicit.

NEW QUESTION 49
Refer to the exhibit. A partial OT network is shown.

In this OT network, you must add additional security measures to detect OT protocols and, therefore, increase the traffic visibility.
Which security sensor must you implement to detect the OT protocols in this network? (Choose one answer)

Device detection on all the FortiGate interfaces

Inline IDS on FortiGate_Level3

Application sensor set to monitor on all the FortiGate devices

IPS sensor on FortiGate Level5

NEW QUESTION 50
What are two benefits of a Nozomi integration with FortiNAC? (Choose two.)

Enhanced point of connection details

Direct VLAN assignment

Adapter consolidation for multi-adapter hosts

Importation and classification of hosts

NEW QUESTION 51
Refer to the exhibit.

A Run_report task is shown. You want to automate the generation of a newly created report on FortiAnalyzer. When you configure the Run_report task in Playbook, why is the report not shown in the Report field? (Choose two answers)

You must first configure the connector.

You must first enable Extended Log Filtering in the report.

You must first enable Auto-cache in the report.

You must first configure an event handler.

You must first select Playbook Starter, and then select the newly created report.

NEW QUESTION 52
Refer to the exhibit.

A Logical Topology page of a FortiGate device is shown. Your OT company wants to gain visibility into the network. You decide to implement device detection with the Security Fabric. Based on the exhibit, which statement is correct? (Choose one answer)

Device Detection is enabled on the other identified device.

The other identified device must be authorized on the root FortiGate.

The other identified device must be authorized on FortiAnalyzer.

Device Detection is enabled on port3.

NEW QUESTION 53
The operational technology (OT) network analyst runs different levels of reports to investigate threats that exploit the network. The analyst can run these reports on all routers, switches, and firewalls.
Which FortiSIEM reporting method can analysts use to identify threats that exploit image firmware files?

CMDB reports

Threat hunting reports

Compliance reports

OT/loT reports

NEW QUESTION 54
Refer to the exhibits. A partial Basic Event Handler page on FortiAnalyzer and the creation of a trigger in a FortiGate device are shown.

To improve the protection of your OT network, you want to automate the handling of compromised devices notified through FortiAnalyzer.
You have configured an event handler as shown in the exhibit. When you create the trigger on the FortiGate device, the Event handler name field does not provide the Alert_trigger option.
What two actions must you perform to make the Alert_trigger option available? (Choose two answers)

You must click + Create in the Event handler name field.

You must authorize the FortiGate device on FortiAnalyzer

You must configure the FortiAnalyzer setting on the FortiGate device.

You must configure the trigger on the root FortiGate.

NEW QUESTION 55
You want FortiAnalyzer to trigger an automation stitch on a FortiGate device automatically. What must you configure on FortiAnalyzer to enable direct communication with FortiGate? (Choose one answer)

A Fabric connector

A playbook task

The Fabric settings

An event handler

NEW QUESTION 56
An OT network administrator is trying to implement active authentication.
Which two methods should the administrator use to achieve this? (Choose two.)

Two-factor authentication on FortiAuthenticator

Role-based authentication on FortiNAC

FSSO authentication on FortiGate

Local authentication on FortiGate

NEW QUESTION 57
You want to automate some tasks in your OT network. Which three configurations are directly available in a new basic event handler on FortiAnalyzer? (Choose three answers)

Create a report

Automatically create an incident

Automation stitch

Send alert email

Quarantine an attacker

NEW QUESTION 58
Refer to the exhibit.

The OT devices behind the ruggedized FortiGate have vulnerabilities and you want to apply a virtual patching profile in the firewall policy. Why is Virtual Patching not available in the Security Profiles section? (Choose one answer)

You must enable Virtual Patching in the Feature Visibility section.

You must have a ruggedized FortiGate allowing the virtual patching feature.

You must enable OT signatures.

You must have a valid OT security service license.

NEW QUESTION 59
Refer to the exhibit.

The Core Network Security Connectors page of the FortiGate-2 device is shown. Which statement is correct? (Choose one answer)

FortiGate-2 serves as Fabric Root.

You must enable Security Fabric Connection on the FortiGate-2 interface.

You must configure the FortiAnalyzer settings on FortiGate-2.

FortiGate-2 is not authorized on the root FortiGate.

NEW QUESTION 60
Refer to the exhibit.

You have configured event handlers on FortiAnalyzer to monitor your OT network.
Based on the partial Event Monitor page shown in the exhibit, which statement is correct?