Home / Fortinet / NSE7_OTS-7.2

Fortinet NSE7_OTS-7.2 Practice Test - Questions Answers, Page 5

Question list

List of questions

Question 41

(0)

An OT network consists of multiple FortiGate devices. The edge FortiGate device is deployed as the secure gateway and is only allowing remote operators to access the ICS networks on site. Managemen

Question 42

(0)

Which two frameworks are common to secure ICS industrial processes, including SCADA and DCS? (Choose two.)

Question 43

(0)

Which two statements about the Modbus protocol are true? (Choose two.)

Question 44

(0)

Which two statements are true when you deploy FortiGate as an offline IDS? (Choose two.)

Question 45

(0)

How can you achieve remote access and internet availability in an OT network?

Question 46

(0)

Which type of attack posed by skilled and malicious users of security level 4 (SL 4) of IEC 62443 is designed to defend against intentional attacks?

Question 47

(0)

The OT network analyst runs different level of reports to quickly explore threats that exploit the network. Such reports can be run on all routers, switches, and firewalls. Which FortiSIEM reporting

Question 48

(0)

To increase security protection in an OT network, how does application control on ForliGate detect industrial traffic?

Question 49

(0)

What are two critical tasks the OT network auditors must perform during OT network risk assessment and management? (Choose two.)

Question 50

(0)

Which statement is correct about processing matched rogue devices by FortiNAC?

Question 41

An OT network consists of multiple FortiGate devices. The edge FortiGate device is deployed as the secure gateway and is only allowing remote operators to access the ICS networks on site.

Management hires a third-party company to conduct health and safety on site. The third-party company must have outbound access to external resources.

As the OT network administrator, what is the best scenario to provide external access to the third-party company while continuing to secure the ICS networks?

Configure outbound security policies with limited active authentication users of the third-party company.

Create VPN tunnels between downstream FortiGate devices and the edge FortiGate to protect ICS network traffic.

Split the edge FortiGate device into multiple logical devices to allocate an independent VDOM for the third-party company.

Implement an additional firewall using an additional upstream link to the internet.

Show Answer Comment (0)

Question 42

Which two frameworks are common to secure ICS industrial processes, including SCADA and DCS? (Choose two.)

Modbus

NIST Cybersecurity

IEC 62443

IEC104

Show Answer Comment (0)

Question 43

Which two statements about the Modbus protocol are true? (Choose two.)

Modbus uses UDP frames to transport MBAP and function codes.

Most of the PLC brands come with a built-in Modbus module.

You can implement Modbus networking settings on internetworking devices.

Modbus is used to establish communication between intelligent devices.

Show Answer Comment (0)

Question 44

Which two statements are true when you deploy FortiGate as an offline IDS? (Choose two.)

FortiGate receives traffic from configured port mirroring.

Network traffic goes through FortiGate.

FortiGate acts as network sensor.

Network attacks can be detected and blocked.

Show Answer Comment (0)

Question 45

How can you achieve remote access and internet availability in an OT network?

Create a back-end backup network as a redundancy measure.

Implement SD-WAN to manage traffic on each ISP link.

Add additional internal firewalls to access OT devices.

Create more access policies to prevent unauthorized access.

Show Answer Comment (0)

Question 46

Which type of attack posed by skilled and malicious users of security level 4 (SL 4) of IEC 62443 is designed to defend against intentional attacks?

Users with access to moderate resources

Users with low access to resources

Users with unintentional operator error

Users with substantial resources

Show Answer Comment (0)

The OT network analyst runs different level of reports to quickly explore threats that exploit the network. Such reports can be run on all routers, switches, and firewalls. Which FortiSIEM reporting method helps to identify these type of exploits of image firmware files?

CMDB reports

Threat hunting reports

Compliance reports

OT/loT reports

Show Answer Comment (0)