Exam NSE6_OTS_AR-7.6 Topic 2 Question 23 Discussion
Actual exam question for Fortinet's NSE6_OTS_AR-7.6 exam
Question #: 23
Topic #: 2
Question #: 23
Topic #: 2
Refer to the exhibit. You are creating a new operational technology (OT) rule to monitor Modbus protocol traffic on FortiSIEM.
Which action must you take to ensure that all Modbus messages on the network match the rule?

Which action must you take to ensure that all Modbus messages on the network match the rule?

Suggested Answer: D Vote an answer
The current Aggregate condition is set to COUNT(Matched Events) >= 1, which only triggers the rule after at least one event. To ensure all Modbus messages (including the first one) match the rule, the condition must be >= 0, so every event is considered, including the very first occurrence.
by Winifred at Oct 14, 2026, 09:19 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).