You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM.
Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)

1. A. Security
2. B. IPS
3. C. List
4. D. Risk
5. E. Overview

Correct Answer: CDE

What can be assigned using network access control policies?

1. A. Layer 3 polling intervals
2. B. FortiNAC device polling methods
3. C. Logical networks
4. D. Profiling rules

Correct Answer: C

Refer to the exhibits.

Which statement is true about the traffic passing through to PLC-2?

1. A. IPS must be enabled to inspect application signatures.
2. B. The application filter overrides the default action of some IEC 104 signatures.
3. C. IEC 104 signatures are all allowed except the C.BO.NA 1 signature.
4. D. SSL Inspection must be set to deep-inspection to correctly apply application control.

Correct Answer: B

Refer to the exhibit.

Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

1. A. Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.
2. B. Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.
3. C. IT and OT networks are separated by segmentation.
4. D. FortiGate-3 and FortiGate-4 devices must be in a transparent mode.

Correct Answer: AC

The OT network analyst runs different level of reports to quickly explore threats that exploit the network. Such reports can be run on all routers, switches, and firewalls. Which FortiSIEM reporting method helps to identify these type of exploits of image firmware files?

1. A. CMDB reports
2. B. Threat hunting reports
3. C. Compliance reports
4. D. OT/loT reports

Correct Answer: B