Refer to the exhibits. A partial Basic Event Handler page on FortiAnalyzer and the creation of a trigger in a FortiGate device are shown.

To improve the protection of your OT network, you want to automate the handling of compromised devices notified through FortiAnalyzer.
You have configured an event handler as shown in the exhibit. When you create the trigger on the FortiGate device, the Event handler name field does not provide the Alert_trigger option.
What two actions must you perform to make the Alert_trigger option available? (Choose two answers)

• A. You must click + Create in the Event handler name field.
• B. You must configure the FortiAnalyzer setting on the FortiGate device.
• C. You must configure the trigger on the root FortiGate.
• D. You must authorize the FortiGate device on FortiAnalyzer

To improve visibility into the risks in your OT network, you would like to create a new report on FortiAnalyzer.
What must you do to create this report? (Choose one answer)

• A. Import a report created in FortiSIEM.
• B. Clone a predefined report to create a new one.
• C. Create a template or use an existing one.
• D. Enable the FortiAnalyzer Fabric settings.

An OT architect has deployed a Layer 2 switch in the OT network at Level 1 in the Purdue model- process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs.
All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.
Which statement about the traffic between PLC1 and PLC2 is true?

• A. In order to communicate, PLC1 must be in the same VLAN as PLC2.
• B. The Layer 2 switch routes any traffic to the FortiGate device through an Ethernet link.
• C. The FortiGate must be configured as a "Router on a stick" for intra-PLC communication.
• D. The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.

Refer to the exhibit. The FGT-Edge device is a VPN gateway that allows remote administrators access to the local ICS network. Management hires a third-party company to conduct health and safety on site. The third-party company must have outbound access to external resources.
What is the best scenario to provide external access to the third-party company while continuing to secure the ICS networks?

• A. Split the edge FortiGate device into multiple logical devices to allocate an independent VDOM for the third-party company.
• B. Configure outbound security policies with limited active authentication users of the third-party company.
• C. Implement an additional firewall using an additional upstream link to the internet.
• D. Create VPN tunnels between downstream FortiGate devices and the edge FortiGate to protect ICS network traffic.

In the context of FortiNAC, what is a key feature of a logical network?

• A. It simplifies network access policy management by reducing the number of policies needed.
• B. It can identify several endpoints with a single rule.
• C. It creates a one-to-one association between a network access policy and a VLAN.
• D. It groups up to 10 VLANs into a single policy.