Home / Fortinet / NSE7_OTS-7.2

Fortinet NSE7_OTS-7.2 Practice Test - Questions Answers, Page 3

Question list

List of questions

Question 21

(0)

An OT administrator has configured FSSO and local firewall authentication. A user who is part of a user group is not prompted from credentials during authentication. What is a possible reason?

Question 22

(0)

Refer to the exhibit. Given the configurations on the FortiGate, which statement is true?

Question 23

(0)

An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network. Which two statements about Fort

Question 24

(0)

You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM. Which three FortiSIEM options can you use to investigate these incidents? (Choose three.

Question 25

(0)

Refer to the exhibit. Which statement about the interfaces shown in the exhibit is true?

Question 26

(0)

When device profiling rules are enabled, which devices connected on the network are evaluated by the device profiling rules?

Question 27

(0)

What two advantages does FortiNAC provide in the OT network? (Choose two.)

Question 28

(0)

What triggers Layer 2 polling of infrastructure devices connected in the network?

Question 29

(0)

An OT administrator configured and ran a default application risk and control report in FortiAnalyzer to learn more about the key application crossing the network. However, the report output is empt

Question 30

(0)

An OT supervisor needs to protect their network by implementing security with an industrial signature database on the FortiGate device. Which statement about the industrial signature database on Fo

Question 21

An OT administrator has configured FSSO and local firewall authentication. A user who is part of a user group is not prompted from credentials during authentication.

What is a possible reason?

FortiGate determined the user by passive authentication

The user was determined by Security Fabric

Two-factor authentication is not configured with RADIUS authentication method

FortiNAC determined the user by DHCP fingerprint method

Show Answer Comment (0)

Question 22

Refer to the exhibit.

Given the configurations on the FortiGate, which statement is true?

FortiGate is configured with forward-domains to reduce unnecessary traffic.

FortiGate is configured with forward-domains to forward only domain controller traffic.

FortiGate is configured with forward-domains to forward only company domain website traffic.

FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.

Show Answer Comment (0)

Question 23

An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.

Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

You must set correct operator in event handler to trigger an event.

You can automate SOC tasks through playbooks.

Each playbook can include multiple triggers.

You cannot use Windows and Linux hosts security events with FortiSoC.

Show Answer Comment (0)

Question 24

You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM.

Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)

Security

IPS

List

Risk

Overview

Show Answer Comment (0)

Question 25

Refer to the exhibit.

Which statement about the interfaces shown in the exhibit is true?

port2, port2-vlan10, and port2-vlan1 are part of the software switch interface.

The VLAN ID of port1-vlan1 can be changed to the VLAN ID 10.

port1-vlan10 and port2-vlan10 are part of the same broadcast domain

port1, port1-vlan10, and port1-vlan1 are in different broadcast domains

Show Answer Comment (0)

Question 26

When device profiling rules are enabled, which devices connected on the network are evaluated by the device profiling rules?

Known trusted devices, each time they change location

All connected devices, each time they connect

Rogue devices, only when they connect for the first time

Rogue devices, each time they connect

Show Answer Comment (0)

Question 27

What two advantages does FortiNAC provide in the OT network? (Choose two.)

It can be used for IoT device detection.

It can be used for industrial intrusion detection and prevention.

It can be used for network micro-segmentation.

It can be used for device profiling.

Show Answer Comment (0)

Question 28

What triggers Layer 2 polling of infrastructure devices connected in the network?

A failed Layer 3 poll

A matched security policy

A matched profiling rule

A linkup or linkdown trap

Show Answer Comment (0)

An OT administrator configured and ran a default application risk and control report in FortiAnalyzer to learn more about the key application crossing the network. However, the report output is empty despite the fact that some related real-time and historical logs are visible in the FortiAnalyzer.

What are two possible reasons why the report output was empty? (Choose two.)

The administrator selected the wrong logs to be indexed in FortiAnalyzer.

The administrator selected the wrong time period for the report.

The administrator selected the wrong devices in the Devices section.

The administrator selected the wrong hcache table for the report.

Show Answer Comment (0)