Fortinet NSE 7 - OT Security 7.2 - NSE7_OTS-7.2 Exam Practice Test

Question 1

Which type of attack posed by skilled and malicious users of security level 3 (SL 3) of IEC 62443 is designed to defend against intentional attacks?

A. Substantial resources

B. Unintentional operator error

C. Low access to resources

D. Access to moderate resources

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

Refer to the exhibits. Which statement is true about the traffic passing through to PLC-2?

A. IEC 104 signatures are all allowed except the C.BO.NA 1 signature.

B. SSL Inspection must be set to deep-inspection to correctly apply application control.

C. The application filter overrides the default action of some IEC 104 signatures.

D. IPS must be enabled to inspect application signatures.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit. You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

A. You must use a third-party RADIUS OTP server.

B. You must use the user self-registration server.

C. You must use a FortiAuthenticator.

D. You must register the same FortiToken on more than one FortiGate.

Correct Answer: C

Question 4

Which deployment option allows an administrator to detect intrusions without any modifications to production traffic?

A. Virtual patching

B. Offline IPS

C. Offline IDS

D. Inline IPS and IDS

Correct Answer: C

Question 5

Refer to the exhibit. An operational technology rule is created and successfully activated to monitor the Modbus protocol on FortiSIEM. However, the rule does not trigger incidents despite Modbus traffic and application logs being received correctly by FortiSIEM.
Which statement correctly describes the issue on the rule configuration?

A. The SubPattern is missing the filter to match the Modbus protocol.

B. The attributes in the Group By section must match the ones in Fitters section.

C. The first condition on the SubPattern filter must use the OR logical operator.

D. The Aggregate attribute COUNT expression is incompatible with the filters.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

Refer to the exhibit. Which statement about the interfaces shown in the exhibit is true?

A. port1-vlan10 and port2-vlan10 are part of the same broadcast domain

B. The VLAN ID of port1-vlan1 can be changed to the VLAN ID 10.

C. port2, port2-vlan10, and port2-vlan1 are part of the software switch interface.

D. port1, port1-vlan10, and port1-vlan1 are in different broadcast domains

Correct Answer: D

Question 7

Refer to the exhibit. An operational technology (OT) network security audit concluded that the application sensor does not block the IEC.60870.5.104_Information.Trasfer.C.BO.NA.1 signature.
Which change must the OT network administrator make?

A. Update the priority of the C.BO.NA.1 signature override to 1.

B. Remove IEC.60870.5.104_Information.Transfer.C.BO.NA.1 from the first filter override.

C. Change the security action of the industrial category to monitor.

D. Set all application categories to apply default actions.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

An OT architect has deployed a Layer 2 switch in the OT network at Level 1 in the Purdue model- process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs.
All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.
Which statement about the traffic between PLC1 and PLC2 is true?

A. The Layer 2 switches routes any traffic to the FortiGate device through an Ethernet link.

B. PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.

C. The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.

D. In order to communicate, PLC1 must be in the same VLAN as PLC2.

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 9

Refer to the exhibit. Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)

A. FortiNAC for network access control

B. FortiEDR for endpoint detection

C. FortiSIEM for security incident and event management

D. FortiGate for application control and intrusion prevention system (IPS)

E. FortiGate for SD-WAN

Correct Answer: A,B,D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Fortinet NSE 7 - OT Security 7.2 - NSE7_OTS-7.2 Exam Practice Test

Latest Update

Useful Links

Contact Us