Weekend Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple70

Home
Fortinet
NSE 7 Network Security Architect
NSE7_OTS-7.2
Fortinet NSE 7 - OT Security 7.2 Questions and Answers

Pass the Fortinet NSE 7 Network Security Architect NSE7_OTS-7.2 Questions and answers with ExamsMirror

Practice at least 50% of the questions to maximize your chances of passing.

Exam NSE7_OTS-7.2 Premium Access

View all detail and faqs for the NSE7_OTS-7.2 exam

Go to Exam

416 Students Passed

88% Average Score

98% Same Questions

Viewing page 1 out of 2 pages

Viewing questions 1-10 out of questions

Questions # 1:

An OT supervisor needs to protect their network by implementing security with an industrial signature database on the FortiGate device.

Which statement about the industrial signature database on FortiGate is true?

Options:

A supervisor must purchase an industrial signature database and import it to the FortiGate.

An administrator must create their own database using custom signatures.

By default, the industrial database is enabled.

A supervisor can enable it through the FortiGate CLI.

Answer

Questions # 2:

A FortiGate device is newly deployed as the edge gateway of an OT network security fabric. The downstream FortiGate devices are also newly deployed as Security Fabric leafs to protect the control area zone.

With no additional essential networking devices, and to implement micro-segmentation on this OT network, what configuration must the OT network architect apply to control intra-VLAN traffic?

Options:

Enable transparent mode on the edge FortiGate device.

Enable security profiles on all interfaces connected in the control area zone.

Set up VPN tunnels between downstream and edge FortiGate devices.

Create a software switch on each downstream FortiGate device.

Answer

Questions # 3:

Which three common breach points can you find in a typical OT environment? (Choose three.)

Options:

Black hat

VLAN exploits

Global hat

RTU exploits

Hard hat

Answer

A, D, E

Questions # 4:

An OT network administrator is trying to implement active authentication.

Which two methods should the administrator use to achieve this? (Choose two.)

Options:

Two-factor authentication on FortiAuthenticator

Role-based authentication on FortiNAC

FSSO authentication on FortiGate

Local authentication on FortiGate

Answer

A, D

Questions # 5:

Which three Fortinet products can you use for device identification in an OT industrial control system (ICS)? (Choose three.)

Options:

FortiSIEM

FortiManager

FortiAnalyzer

FortiGate

FortiNAC

Answer

A, D, E

Questions # 6:

FortiAnalyzer is implemented in the OT network to receive logs from responsible FortiGate devices. The logs must be processed by FortiAnalyzer.

In this scenario, which statement is correct about the purpose of FortiAnalyzer receiving and processing multiple log messages from a given PLC or RTU?

Options:

To isolate PLCs or RTUs in the event of external attacks

To configure event handlers and take further action on FortiGate

To determine which type of messages from the PLC or RTU causes issues in the plant

To help OT administrators configure the network and prevent breaches

Answer

Questions # 7:

An OT administrator configured and ran a default application risk and control report in FortiAnalyzer to learn more about the key application crossing the network. However, the report output is empty despite the fact that some related real-time and historical logs are visible in the FortiAnalyzer.

What are two possible reasons why the report output was empty? (Choose two.)

Options:

The administrator selected the wrong logs to be indexed in FortiAnalyzer.

The administrator selected the wrong time period for the report.

The administrator selected the wrong devices in the Devices section.

The administrator selected the wrong hcache table for the report.

Answer

B, C

Explanation

https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/32cb817d-a307-11eb-b70b-00505692583a/FortiAnalyzer-7.0.0-Administration_Guide.pdf

Questions # 8:

What triggers Layer 2 polling of infrastructure devices connected in the network?