[2024] Use Valid New NSE7_OTS-7.2 Questions - Top choice Help You Gain Success [Q36-Q60]

4/5 - (1 vote)

[2024] Use Valid New NSE7_OTS-7.2 Questions – Top choice Help You Gain Success

NSE7_OTS-7.2 Exam Practice Materials Collection

Fortinet NSE7_OTS-7.2 (Fortinet NSE 7 – OT Security 7.2) Certification Exam is a professional certification exam designed for individuals who want to demonstrate their skills and expertise in securing operational technology (OT) networks. Fortinet NSE 7 – OT Security 7.2 certification exam is one of the most popular certifications in the field of cybersecurity, and it is recognized globally as a benchmark for excellence in OT security.

NO.36 Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)? (Choose three.)

FortiNAC

FortiManager

FortiAnalyzer

FortiSIEM

FortiGate

NO.37 Refer to the exhibit.

Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.

Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.

IT and OT networks are separated by segmentation.

FortiGate-3 and FortiGate-4 devices must be in a transparent mode.

NO.38 In the context of FortiNAC, what is a key feature of a logical network?

It creates a one-to-one association between a network access policy and a VLAN.

It groups up to 10 VLANs into a single policy.

It simplifies network access policy management by reducing the number of policies needed.

It can identify several endpoints with a single rule.

NO.39 What are two benefits of a Nozomi integration with FortiNAC? (Choose two.)

Enhanced point of connection details

Direct VLAN assignment

Adapter consolidation for multi-adapter hosts

Importation and classification of hosts

NO.40 Refer to the exhibit.

You are navigating through FortiSIEM in an OT network.
How do you view information presented in the exhibit and what does the FortiGate device security status tell you?

In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.

In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device.

In the widget dashboard and there are one or more high-severity incidents for the FortiGate device.

In the business service dashboard and there are one or more high-severity security incidents for the FortiGate device.

NO.41 Refer to the exhibit.

Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.

Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.

IT and OT networks are separated by segmentation.

FortiGate-3 and FortiGate-4 devices must be in a transparent mode.

NO.42 What are two benefits of a Nozomi integration with FortiNAC? (Choose two.)

Enhanced point of connection details

Direct VLAN assignment

Adapter consolidation for multi-adapter hosts

Importation and classification of hosts

NO.43 Refer to the exhibit.

Which statement about the interfaces shown in the exhibit is true?

port2, port2-vlan10, and port2-vlan1 are part of the software switch interface.

The VLAN ID of port1-vlan1 can be changed to the VLAN ID 10.

port1-vlan10 and port2-vlan10 are part of the same broadcast domain

port1, port1-vlan10, and port1-vlan1 are in different broadcast domains

NO.44 Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic?
(Choose three.)

Services defined in the firewall policy.

Source defined as internet services in the firewall policy

Lowest to highest policy ID number

Destination defined as internet services in the firewall policy

Highest to lowest priority defined in the firewall policy

NO.45 Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)

Services defined in the firewall policy.

Source defined as internet services in the firewall policy

Lowest to highest policy ID number

Destination defined as internet services in the firewall policy

Highest to lowest priority defined in the firewall policy

NO.46 Refer to the exhibits. Which statement about some of the generated report elements from FortiAnalyzer is true?

The report confirms Modbus and IEC 104 are the key applications crossing the network.

FortiGate collects the logs and generates the report to FortiAnalyzer.

The file types confirm the infected applications on the PLCs.

This report is predefined and is not available for customization.

NO.47 Refer to the exhibit. Which statement about the interfaces shown in the exhibit is true?

port2, port2-vlan10, and port2-vlan1 are part of the software switch interface.

The VLAN ID of port1-vlan1 can be changed to the VLAN ID 10.

port1-vlan10 and port2-vlan10 are part of the same broadcast domain

port1, port1-vlan10, and port1-vlan1 are in different broadcast domains

NO.48 An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.
Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

You must set correct operator in event handler to trigger an event.

You can automate SOC tasks through playbooks.

Each playbook can include multiple triggers.

You cannot use Windows and Linux hosts security events with FortiSoC.

NO.49 Refer to the exhibit and analyze the output.

Which statement about the output is true?

This is a sample of a FortiAnalyzer system interface event log.

This is a sample of an SNMP temperature control event log.

This is a sample of a PAM event type.

This is a sample of FortiGate interface statistics.

NO.50 As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect exploits that affect PLCs.
Which security sensor must implement to detect these types of industrial exploits?

Intrusion prevention system (IPS)

Deep packet inspection (DPI)

Antivirus inspection

Application control

NO.51 Refer to the exhibit. Given the configurations on the FortiGate, which statement is true?

FortiGate is configured with forward-domains to reduce unnecessary traffic.

FortiGate is configured with forward-domains to forward only domain controller traffic.

FortiGate is configured with forward-domains to forward only company domain website traffic.

FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.

NO.52 An OT supervisor has configured LDAP and FSSO for the authentication. The goal is that all the users be authenticated against passive authentication first and, if passive authentication is not successful, then users should be challenged with active authentication.
What should the OT supervisor do to achieve this on FortiGate?

Configure a firewall policy with LDAP users and place it on the top of list of firewall policies.

Enable two-factor authentication with FSSO.

Configure a firewall policy with FSSO users and place it on the top of list of firewall policies.

Under config user settings configure set auth-on-demand implicit.

NO.53 A supervisor is configuring a software switch on a FortiGate device. What must the supervisor configure on FortiGate to control the traffic between member interfaces on the software switch, using firewall policies?

The supervisor must add different VLAN interfaces to the software switch.

The supervisor must configure the software switch with at least one wireless interface and one VLAN interface.

The supervisor must configure a separate forward domain for the software switch.

The supervisor must configure intra-switch-policy to explicit.

NO.54 Which two statements about the Modbus protocol are true? (Choose two.)

Modbus uses UDP frames to transport MBAP and function codes.

Most of the PLC brands come with a built-in Modbus module.

You can implement Modbus networking settings on internetworking devices.

Modbus is used to establish communication between intelligent devices.

NO.55 Refer to the exhibit. An operational technology rule is created and successfully activated to monitor the Modbus protocol on FortiSIEM. However, the rule does not trigger incidents despite Modbus traffic and application logs being received correctly by FortiSIEM.
Which statement correctly describes the issue on the rule configuration?

The first condition on the SubPattern filter must use the OR logical operator.

The attributes in the Group By section must match the ones in Fitters section.

The Aggregate attribute COUNT expression is incompatible with the filters.

The SubPattern is missing the filter to match the Modbus protocol.

NO.56 An OT administrator is defining an incident notification policy using FortiSIEM and would like to configure the system with a notification policy. If an incident occurs, the administrator would like to be able to intervene and block an IP address or disable a user in Active Directory from FortiSIEM. Which step must the administrator take to achieve this task?

Configure a fabric connector with a notification policy on FortiSIEM to connect with FortiGate.

Create a notification policy and define a script/remediation on FortiSIEM.

Define a script/remediation on FortiManager and enable a notification rule on FortiSIEM.

Deploy a mitigation script on Active Directory and create a notification policy on FortiSIEM.

NO.57 The OT network analyst run different level of reports to quickly explore failures that could put the network at risk. Such reports can be about device performance. Which FortiSIEM reporting method helps to identify device failures?

Business service reports

Device inventory reports

CMDB operational reports

Active dependent rules reports

NO.58 Which three device profiling methods of FortiNAC are considered non-direct? (Choose three.)

Location

TCP

IP range

SSH

Network traffic

NO.59 An OT network architect needs to secure control area zones with a single network access policy to provision devices to any number of different networks.
On which device can this be accomplished?

FortiGate

FortiEDR

FortiSwitch

FortiNAC

NO.60 Refer to the exhibit.

Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)