[Oct 26, 2024] Fully Updated Dumps PDF - Latest NSE7_OTS-7.2 Exam Questions and Answers
100% Free NSE7_OTS-7.2 Exam Dumps to Pass Exam Easily from VCEDumps
Fortinet NSE7_OTS-7.2 (Fortinet NSE 7 - OT Security 7.2) Certification Exam is a professional-level certification for individuals who want to validate their expertise in securing operational technology (OT) networks. NSE7_OTS-7.2 exam is designed to test the candidate's knowledge and skills in securing OT environments against cyber threats such as malware, ransomware, and other advanced persistent threats.
NEW QUESTION # 40
Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)?
(Choose three.)
- A. FortiAnalyzer
- B. FortiManager
- C. FortiNAC
- D. FortiSIEM
- E. FortiGate
Answer: C,D,E
Explanation:
Explanation
A: FortiNAC - FortiNAC is a network access control solution that provides visibility and control over network devices. It can identify devices, enforce access policies, and automate threat response.
D: FortiSIEM - FortiSIEM is a security information and event management solution that can collect and analyze data from multiple sources, including network devices and servers. It can help identify potential security threats, as well as monitor compliance with security policies and regulations.
E: FortiAnalyzer - FortiAnalyzer is a central logging and reporting solution that collects and analyzes data from multiple sources, including FortiNAC and FortiSIEM. It can provide insights into network activity and help identify anomalies or security threats.
NEW QUESTION # 41
An OT supervisor has configured LDAP and FSSO for the authentication. The goal is that all the users be authenticated against passive authentication first and, if passive authentication is not successful, then users should be challenged with active authentication.
What should the OT supervisor do to achieve this on FortiGate?
- A. Configure a firewall policy with FSSO users and place it on the top of list of firewall policies.
- B. Enable two-factor authentication with FSSO.
- C. Under config user settings configure set auth-on-demand implicit.
- D. Configure a firewall policy with LDAP users and place it on the top of list of firewall policies.
Answer: A
Explanation:
Explanation
The OT supervisor should configure a firewall policy with FSSO users and place it on the top of list of firewall policies in order to achieve the goal of authenticating users against passive authentication first and, if passive authentication is not successful, then challenging them with active authentication.
NEW QUESTION # 42
Refer to the exhibit. Given the configurations on the FortiGate, which statement is true?
- A. FortiGate is configured with forward-domains to forward only company domain website traffic.
- B. FortiGate is configured with forward-domains to forward only domain controller traffic.
- C. FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.
- D. FortiGate is configured with forward-domains to reduce unnecessary traffic.
Answer: D
NEW QUESTION # 43
Refer to the exhibit. You are assigned to implement a remote authentication server in the OT network. Which part of the hierarchy should the authentication server be part of?
- A. Cloud
- B. Core
- C. Access
- D. Edge
Answer: D
NEW QUESTION # 44
Refer to the exhibit.
You are navigating through FortiSIEM in an OT network.
How do you view information presented in the exhibit and what does the FortiGate device security status tell you?
- A. In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.
- B. In the business service dashboard and there are one or more high-severity security incidents for the FortiGate device.
- C. In the widget dashboard and there are one or more high-severity incidents for the FortiGate device.
- D. In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device.
Answer: D
NEW QUESTION # 45
When device profiling rules are enabled, which devices connected on the network are evaluated by the device profiling rules?
- A. Rogue devices, only when they connect for the first time
- B. Rogue devices, each time they connect
- C. All connected devices, each time they connect
- D. Known trusted devices, each time they change location
Answer: A
NEW QUESTION # 46
An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.
Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)
- A. You must set correct operator in event handler to trigger an event.
- B. You cannot use Windows and Linux hosts security events with FortiSoC.
- C. Each playbook can include multiple triggers.
- D. You can automate SOC tasks through playbooks.
Answer: A,D
Explanation:
Explanation
Ref: https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/268882/fortisoc
NEW QUESTION # 47
You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM.
Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)
- A. List
- B. Security
- C. IPS
- D. Overview
- E. Risk
Answer: A,D,E
NEW QUESTION # 48
As an OT administrator, it is important to understand how industrial protocols work in an OT network. Which communication method is used by the Modbus protocol?
- A. It uses OSI Layer 2 and both the primary/secondary devices send data based on a matching token ring.
- B. It uses OSI Layer 2 and both the primary/secondary devices always send data during the communication.
- C. It uses OSI Layer 2 and the secondary device sends data based on request from primary device.
- D. It uses OSI Layer 2 and the primary device sends data based on request from secondary device.
Answer: C
NEW QUESTION # 49
Which two statements are true when you deploy FortiGate as an offline IDS? (Choose two.)
- A. FortiGate receives traffic from configured port mirroring.
- B. FortiGate acts as network sensor.
- C. Network attacks can be detected and blocked.
- D. Network traffic goes through FortiGate.
Answer: B,D
NEW QUESTION # 50
Refer to the exhibit. The IPS profile is added on all of the security policies on FortiGate. For an OT network, which statement of the IPS profile is true?
- A. All IPS signatures are overridden and must block traffic match signature patterns.
- B. FortiGate has no IPS industrial signature database enabled.
- C. The IPS profile inspects only traffic originating from SCADA equipment.
- D. The listed IPS signatures are classified as SCADAapphcat nns
Answer: D
NEW QUESTION # 51
Refer to the exhibits.
Which statement is true about the traffic passing through to PLC-2?
- A. IPS must be enabled to inspect application signatures.
- B. SSL Inspection must be set to deep-inspection to correctly apply application control.
- C. IEC 104 signatures are all allowed except the C.BO.NA 1 signature.
- D. The application filter overrides the default action of some IEC 104 signatures.
Answer: D
NEW QUESTION # 52
Refer to the exhibit.
Which statement about the interfaces shown in the exhibit is true?
- A. port2, port2-vlan10, and port2-vlan1 are part of the software switch interface.
- B. port1, port1-vlan10, and port1-vlan1 are in different broadcast domains
- C. port1-vlan10 and port2-vlan10 are part of the same broadcast domain
- D. The VLAN ID of port1-vlan1 can be changed to the VLAN ID 10.
Answer: B
NEW QUESTION # 53
Refer to the exhibit.
Which statement about the interfaces shown in the exhibit is true?
- A. port2, port2-vlan10, and port2-vlan1 are part of the software switch interface.
- B. port1, port1-vlan10, and port1-vlan1 are in different broadcast domains
- C. port1-vlan10 and port2-vlan10 are part of the same broadcast domain
- D. The VLAN ID of port1-vlan1 can be changed to the VLAN ID 10.
Answer: B
NEW QUESTION # 54
An OT administrator is defining an incident notification policy using FortiSIEM and would like to configure the system with a notification policy. If an incident occurs, the administrator would like to be able to intervene and block an IP address or disable a user in Active Directory from FortiSIEM.
Which step must the administrator take to achieve this task?
- A. Deploy a mitigation script on Active Directory and create a notification policy on FortiSIEM.
- B. Define a script/remediation on FortiManager and enable a notification rule on FortiSIEM.
- C. Configure a fabric connector with a notification policy on FortiSIEM to connect with FortiGate.
- D. Create a notification policy and define a script/remediation on FortiSIEM.
Answer: D
Explanation:
https://fusecommunity.fortinet.com/blogs/silviu/2022/04/12/fortisiempublishingscript
NEW QUESTION # 55
......
Free NSE7_OTS-7.2 Exam Questions NSE7_OTS-7.2 Actual Free Exam Questions: https://testinsides.vcedumps.com/NSE7_OTS-7.2-examcollection.html
