176 Certification Products • 3429 Comments • 2479 Questions
What is the primary benefit of the LAN Edge solution?
As the first step in your OT network protection plan, you must identify the OT protocols that the FortiGate device supports. Which two configurations must you implement on this FortiGate device?
You want to protect OT devices that are not updated against known vulnerabilities so you apply virtual patching to the firewall policies. What must you check to confirm that the OT devices are virtually patched?
Refer to the exhibit. A basic event handler is shown. You have enabled Automation Stitch to automate the handling of an alert. Which two steps must you take to use this automation stitch?
Refer to the exhibit. Based on the information provided on the partial Event Monitor page shown in the exhibit, how was the attack detected?
Refer to the exhibit. What is the correct order of Jinja expressions to filter the results to show only the IP address values? {{ [slot 1]|[slot 2][slot 3].[slot 4] " }} Select each Jinja expression in the left column and drag and drop it into a blank slot on the right t...
A very long FortiSOAR playbook failed at step 30 because of an intermittent networking issue, which has now been resolved. You want to finish executing the playbook without repeating earlier steps or losing prior context. Which action should you take?
You suspect your organization has been a victim of numerous incidents carried out by the same threat actor. Which option allows you to group the incidents and track them?
An analyst prioritizes blocking IP addresses and domains from every phishing campaign. Based on the Pyramid of Pain model, which two statements accurately describe this approach?
Match the FortiSOAR architecture element to its description. Select each FortiSOAR architecture element in the left column and drag and drop it into the blank space next to its corresponding description in the right column. After matching an element, you can move it again if y...
Refer to the exhibit. The input of a FortiSIEM connector action is shown. You want to create a playbook on FortiSOAR that allows you to accomplish the following: Manually input an IP address. Use the connector action in the exhibit to retrieve a device from the FortiS...
Refer to the exhibits. Examine the FortiGate RSSO configuration shown in the exhibit. FortiGate is set up to use RSSO for user authentication. It is currently receiving RADIUS accounting messages through port3. The incoming RADIUS accounting messages contain the username in...
Refer to the exhibit. Which statement correctly describes the role of the ADVPN device in handling traffic?
Which security attribute is verified during the SSL connection negotiation between FortiClient and FortiClient EMS to mitigate man-in-the-middle (MITM) attacks?
Refer to the exhibit. You want to configure SD-WAN on a network, as shown in the exhibit. The network contains many FortiGate devices. Some are used as next-generation firewalls (NGFW), and some are installed with extensions such as FortiSwitch, FortiAP, or FortiExtender....
In addition to requiring a FortiAnalyzer device to configure the Security Fabric, which license must be added to FortiAnalyzer to use Indicators of Compromise (IOC) rules?
Refer to this partial incident output: Condition: if this Pattern occurs within any 1800-second time window Host Interface Name: Red Hat VirtIO Ethernet Adapter Recv Packet Errors: 0 Sent Packet Errors: 0 Recv Packet Discards: 37 Sent Packet Discards: 0 Recv Packet Err...
When configuring an Ingest Bulk Feed playbook step, which two restrictions must you consider?
Which two phases are part of the FortiSOAR incident handling process but are not phases in the NIST 800-61 revision 2 model?
Refer to the exhibit. An analyst is trying to generate an incident with a title that includes the Source IP, Destination IP, User, and Destination Host Name. They are unable to add a Destination Host Name as an incident attribute. What must be changed to allow the analyst t...