Free Fortinet NSE7_OTS-7.2 Exam Questions

Question 1

What two advantages does FortiNAC provide in the OT network? (Choose two.)

A : It can be used for IoT device detection.

B : It can be used for industrial intrusion detection and prevention.

C : It can be used for network micro-segmentation.

D : It can be used for device profiling.

Answer: A,D

Question 2

Refer to the exhibit.PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT can send traffic to each other at the Layer 2 level. What must the OT admin do to prevent Layer 2-level communication between PLC-3 and CLIENT?

A : Set a unique forward domain for each interface of the software switch.

B : Create a VLAN for each device and replace the current FGT-2 software switch members.

C : Enable explicit intra-switch policy to require firewall policies on FGT-2.

D : Implement policy routes on FGT-2 to control traffic between devices.

Answer: A,B

Question 3

Which type of attack posed by skilled and malicious users of security level 4 (SL 4) of IEC 62443 is designed to defend against intentional attacks?

A : Users with access to moderate resources

B : Users with low access to resources

C : Users with unintentional operator error

D : Users with substantial resources

Answer: D

Question 4

Refer to the exhibits.Which statement is true about the traffic passing through to PLC-2?

A : IPS must be enabled to inspect application signatures

B : The application filter overrides the default action of some IEC 104 signatures.

C : IEC 104 signatures are all allowed except the C.BO.NA 1 signature.

D : SSL Inspection must be set to deep-inspection to correctly apply application control.

Answer: B

Question 5