Fortinet NSE7_OTS-7.2 Exam Questions - Real Practice Questions for Guaranteed Success

Question 1

What two advantages does FortiNAC provide in the OT network? (Choose two.)

AIt can be used for IoT device detection.

BIt can be used for industrial intrusion detection and prevention.

CIt can be used for network micro-segmentation.

DIt can be used for device profiling.

Correct : A, D

Typically, in a microsegmented network, NGFWs are used in conjunction with VLANs to implement security policies and to inspect and filter network communications. Fortinet FortiSwitch and FortiGate NGFW offer an integrated approach to microsegmentation.

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AIt can be used for IoT device detection.

BIt can be used for industrial intrusion detection and prevention.

CIt can be used for network micro-segmentation.

DIt can be used for device profiling.

0 / 1500

Question 2

What triggers Layer 2 polling of infrastructure devices connected in the network?

AA failed Layer 3 poll

BA matched security policy

CA matched profiling rule

DA linkup or linkdown trap

Correct : D

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AA failed Layer 3 poll

BA matched security policy

CA matched profiling rule

DA linkup or linkdown trap

0 / 1500

Question 3

An OT administrator configured and ran a default application risk and control report in FortiAnalyzer to learn more about the key application crossing the network. However, the report output is empty despite the fact that some related real-time and historical logs are visible in the FortiAnalyzer.

What are two possible reasons why the report output was empty? (Choose two.)

AThe administrator selected the wrong logs to be indexed in FortiAnalyzer.

BThe administrator selected the wrong time period for the report.

CThe administrator selected the wrong devices in the Devices section.

DThe administrator selected the wrong hcache table for the report.

Correct : B, C

https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/32cb817d-a307-11eb-b70b-00505692583a/FortiAnalyzer-7.0.0-Administration_Guide.pdf

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe administrator selected the wrong logs to be indexed in FortiAnalyzer.

BThe administrator selected the wrong time period for the report.

CThe administrator selected the wrong devices in the Devices section.

DThe administrator selected the wrong hcache table for the report.

0 / 1500

Question 4

Refer to the exhibit.

An operational technology rule is created and successfully activated to monitor the Modbus protocol on FortiSIEM. However, the rule does not trigger incidents despite Modbus traffic and application logs being received correctly by FortiSIEM.

Which statement correctly describes the issue on the rule configuration?

AThe first condition on the SubPattern filter must use the OR logical operator.

BThe attributes in the Group By section must match the ones in Fitters section.

CThe Aggregate attribute COUNT expression is incompatible with the filters.

DThe SubPattern is missing the filter to match the Modbus protocol.

Correct : B

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AThe first condition on the SubPattern filter must use the OR logical operator.

BThe attributes in the Group By section must match the ones in Fitters section.

CThe Aggregate attribute COUNT expression is incompatible with the filters.

DThe SubPattern is missing the filter to match the Modbus protocol.

0 / 1500

Question 5

An OT network consists of multiple FortiGate devices. The edge FortiGate device is deployed as the secure gateway and is only allowing remote operators to access the ICS networks on site.

Management hires a third-party company to conduct health and safety on site. The third-party company must have outbound access to external resources.

As the OT network administrator, what is the best scenario to provide external access to the third-party company while continuing to secure the ICS networks?

AConfigure outbound security policies with limited active authentication users of the third-party company.

BCreate VPN tunnels between downstream FortiGate devices and the edge FortiGate to protect ICS network traffic.

CSplit the edge FortiGate device into multiple logical devices to allocate an independent VDOM for the third-party company.

DImplement an additional firewall using an additional upstream link to the internet.

Correct : C

Options Selected by Other Users:

Mark Question:

Start a Discussions

Submit Your Answer:

AConfigure outbound security policies with limited active authentication users of the third-party company.

BCreate VPN tunnels between downstream FortiGate devices and the edge FortiGate to protect ICS network traffic.

CSplit the edge FortiGate device into multiple logical devices to allocate an independent VDOM for the third-party company.

DImplement an additional firewall using an additional upstream link to the internet.

0 / 1500

Master Fortinet NSE7_OTS-7.2 Exam with Reliable Practice Questions

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users:

Options Selected by Other Users: