We're so confident of our products that we provide no hassle product exchange.
Fortinet NSEI_OTS_AR-7.6 Exam Overview:
| Certification Vendor: | Fortinet |
|---|---|
| Exam Name: | Fortinet NSE 6 - OT Security 7.6 Architect |
| Exam Number: | NSE6_OTS_AR-7.6 / FCSS_OTS_AR-7.6 |
| Exam Duration: | 65 minutes |
| Certificate Validity Period: | 2 years |
| Exam Price: | $400 USD |
| Related Certifications: | FCSS Secure Networking NSE 4 FortiOS Administrator |
| Available Languages: | English |
| Real Exam Qty: | 35–40 |
| Passing Score: | Pass/Fail (not publicly disclosed) |
| Exam Format: | Multiple Select, Scenario-based, Multiple Choice |
| Recommended Training: | Fortinet OT Security Architect Training |
| Exam Registration: | Pearson VUE Registration |
| Sample Questions: | Fortinet NSEI_OTS_AR-7.6 Sample Questions |
| Exam Way: | Online proctored or onsite at Pearson VUE test centers |
| Pre Condition: | No mandatory prerequisites; recommended: NSE 4 certification, 2+ years OT/ICS experience, networking fundamentals |
| Official Syllabus URL: | https://training.fortinet.com/local/staticpage/view.php?page=ot_security_architect_exam |
Fortinet NSEI_OTS_AR-7.6 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Asset Management | 25% | - Device detection and inventory using FortiGate & FortiNAC - Fortinet Security Fabric for OT environments - OT security standards and compliance (IEC 62443, NIST) |
| Network Security | 25% | - Deep inspection for industrial protocols (Modbus, DNP3, OPC) - Virtual patching for legacy OT systems - Security automation and threat response |
| Monitoring and Risk Assessment | 25% | - Event handling and logging with FortiAnalyzer 7.6 - OT-focused risk assessment and management - Threat detection using FortiSIEM 7.4 |
| Network Access Control | 25% | - Purdue Model and secure network segmentation - OT Ethernet and industrial communication models - Authentication and access policies for OT devices |
Fortinet NSE I - OT Security 7.6 Architect Sample Questions:
Question 1
Refer to the exhibit.
A firewall policy page is shown. To improve the security of your OT network, you have configured a Supervisor profile in the firewall policies, as shown in the exhibit. However, a supervisor is reporting that he cannot ping PLC-1. What are the two reasons? (Choose two answers)
A. The firewall policy ID 8 is not enabled.
B. The Supervisor profile is not configured in the remote server.
C. The supervisor must first authenticate using a protocol such as HTTPS or Telnet.
D. The CLI parameter auth-on-demand is set to always.
Question 2
Refer to the exhibit.
A partial Incident Analysis page is shown. How was the 360-Degree Security Review OT report attached to the incident? (Choose one answer)
A. Automatically by a playbook
B. Automatically by an event handler
C. Automatically by a stitch
D. Manually by an administrator
Question 3
Refer to the exhibit.
The OT devices behind the ruggedized FortiGate have vulnerabilities and you want to apply a virtual patching profile in the firewall policy. Why is Virtual Patching not available in the Security Profiles section? (Choose one answer)
A. You must enable OT signatures.
B. You must enable Virtual Patching in the Feature Visibility section.
C. You must have a ruggedized FortiGate allowing the virtual patching feature.
D. You must have a valid OT security service license.
Question 4
Refer to the exhibit.
Which statement about this partial Asset Identity List page is correct? (Choose one answer)
A. A firewall policy has an Application Control security profile applied to it.
B. A firewall policy has a Virtual Patching security profile applied to it.
C. A firewall policy has an Intrusion Prevention security profile applied to it.
D. A firewall policy has an Antivirus security profile applied to it.
Question 5
Refer to the exhibit.
A Run_report task is shown. You want to automate the generation of a newly created report on FortiAnalyzer . When you configure the Run_report task in Playbook, why is the report not shown in the Report field? (Choose two answers)
A. You must first enable Extended Log Filtering in the report.
B. You must first enable Auto-cache in the report.
C. You must first configure the connector.
D. You must first configure an event handler.
E. You must first select Playbook Starter, and then select the newly created report.
Solutions:
| Question 1 Answer: A,C | Question 2 Answer: D | Question 3 Answer: B | Question 4 Answer: B | Question 5 Answer: A,B |
By Una
