ExamGecko
Login
Home / Fortinet / NSE7_OTS-7.2 / List of questions
Ask Question

Fortinet NSE7_OTS-7.2 Practice Test - Questions Answers, Page 6

Add to Whishlist

List of questions

Question 51

Report Export Collapse

Refer to the exhibit.

Fortinet NSE7_OTS-7.2 image Question 51 27130 09182024190808000000

You are assigned to implement a remote authentication server in the OT network.

Which part of the hierarchy should the authentication server be part of?

Become a Premium Member for full access
  Unlock Premium Member

Question 52

Report Export Collapse

A FortiGate device is newly deployed as the edge gateway of an OT network security fabric. The downstream FortiGate devices are also newly deployed as Security Fabric leafs to protect the control area zone.

With no additional essential networking devices, and to implement micro-segmentation on this OT network, what configuration must the OT network architect apply to control intra-VLAN traffic?

Become a Premium Member for full access
  Unlock Premium Member

Question 53

Report Export Collapse

FortiAnalyzer is implemented in the OT network to receive logs from responsible FortiGate devices. The logs must be processed by FortiAnalyzer.

In this scenario, which statement is correct about the purpose of FortiAnalyzer receiving and processing multiple log messages from a given PLC or RTU?

Become a Premium Member for full access
  Unlock Premium Member

Question 54

Report Export Collapse

Refer to the exhibit.

Fortinet NSE7_OTS-7.2 image Question 54 27133 09182024190808000000

The IPS profile is added on all of the security policies on FortiGate.

For an OT network, which statement of the IPS profile is true?

Become a Premium Member for full access
  Unlock Premium Member

Question 55

Report Export Collapse

With the limit of using one firewall device, the administrator enables multi-VDOM on FortiGate to provide independent multiple security domains to each ICS network. Which statement ensures security protection is in place for all ICS networks?

Become a Premium Member for full access
  Unlock Premium Member

Question 56

Report Export Collapse

Refer to the exhibit.

Fortinet NSE7_OTS-7.2 image Question 56 27135 09182024190808000000

PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT cannot send traffic to each other.

Which two statements about the traffic between PCL-1 and PLC-2 are true? (Choose two.)

Become a Premium Member for full access
  Unlock Premium Member

Question 57

Report Export Collapse

Which three Fortinet products can you use for device identification in an OT industrial control system (ICS)? (Choose three.)

Become a Premium Member for full access
  Unlock Premium Member

Question 58

Report Export Collapse

Refer to the exhibit.

Fortinet NSE7_OTS-7.2 image Question 58 27137 09182024190808000000

In order for a FortiGate device to act as router on a stick, what configuration must an OT network architect implement on FortiGate to achieve inter-VLAN routing?

Become a Premium Member for full access
  Unlock Premium Member

Question 59

Report Export Collapse

The OT network analyst run different level of reports to quickly explore failures that could put the network at risk. Such reports can be about device performance. Which FortiSIEM reporting method helps to identify device failures?

Become a Premium Member for full access
  Unlock Premium Member

Question 60

Report Export Collapse

Which statemenl about the IEC 104 protocol is true?

Become a Premium Member for full access
  Unlock Premium Member
Total 62 questions
Go to page: of 7
Search
Open VPLUS File
Convert VPLUS to PDF

Related questions

An OT network consists of multiple FortiGate devices. The edge FortiGate device is deployed as the secure gateway and is only allowing remote operators to access the ICS networks on site. Management hires a third-party company to conduct health and safety on site. The third-party company must have outbound access to external resources. As the OT network administrator, what is the best scenario to provide external access to the third-party company while continuing to secure the ICS networks?
As an OT administrator, it is important to understand how industrial protocols work in an OT network. Which communication method is used by the Modbus protocol?
Refer to the exhibit. You are assigned to implement a remote authentication server in the OT network. Which part of the hierarchy should the authentication server be part of?
An OT architect has deployed a Layer 2 switch in the OT network at Level 1 the Purdue model-process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs. All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network. What statement about the traffic between PLC1 and PLC2 is true?
To increase security protection in an OT network, how does application control on ForliGate detect industrial traffic?
With the limit of using one firewall device, the administrator enables multi-VDOM on FortiGate to provide independent multiple security domains to each ICS network. Which statement ensures security protection is in place for all ICS networks?
As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect exploits that affect PLCs. Which security sensor must implement to detect these types of industrial exploits?
An OT administrator is defining an incident notification policy using FortiSIEM and would like to configure the system with a notification policy. If an incident occurs, the administrator would like to be able to intervene and block an IP address or disable a user in Active Directory from FortiSIEM. Which step must the administrator take to achieve this task?
Which three common breach points can be found in a typical OT environment? (Choose three.)
Refer to the exhibit. Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)