Refer to the exhibit, which shows a non-protected OT environment. An administrator needs to implement proper protection on the OT network. Which three steps should an administrator take to protect the OT network? (Choose three.)
A.
Deploy an edge FortiGate between the internet and an OT network as a one-arm sniffer.
B.
Deploy a FortiGate device within each ICS network.
C.
Configure firewall policies with web filter to protect the different ICS networks.
D.
Configure firewall policies with industrial protocol sensors
The correct answers are C, D, and E. A, B, and C are incorrect answers.
A. Powering on the VM will not allow it to be live migrated to Clusters A and B.
B. Disabling EVC will prevent the VM from being live migrated to Clusters A and B.
C. Rebooting the VM will not allow it to be live migrated to Clusters A and B.
To protect the different IS environments and limit the propagation of attacks coming from IT to the different ICS networks or elements, segmentation is recommended. In this example, the FortiGate creates conduits that stop threats from propagating between ICS network 1 and ICS network 2. Expanding on this concept, by placing FortiGate devices at strategic points within the IS network itself, you can granularly segment different zones creating an extra layer of protection for the endpoints and controllers as well as protect the data flow and communications between them. FortiGate has specific ICS and SCADA-aware
functionality, and can identify and police most of the common ICS and SCADA protocols. In parallel to this specific protocol support, additional vulnerability protection is provided for applications and devices from the major ICS manufacturers through a set of signatures.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Pledian
1 month agoali_red
2 months, 2 weeks agoSpippolo
4 months, 2 weeks agocciesam
5 months, 2 weeks agoNet_Sec2
6 months, 3 weeks agoJbeaulieu
7 months agopochmendoza
8 months ago