NSE7_OTS-7.2 Premium Exam Engine – Download Free PDF Questions [Q16-Q39]

QUESTION 16
You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM.
Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)

QUESTION 17
Refer to the exhibit. PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT cannot send traffic to each other. Which two statements about the traffic between PCL-1 and PLC-2 are true? (Choose two.)

QUESTION 18
What are two benefits of a Nozomi integration with FortiNAC? (Choose two.)

QUESTION 19
Refer to the exhibit.

You are navigating through FortiSIEM in an OT network.
How do you view information presented in the exhibit and what does the FortiGate device security status tell you?

QUESTION 20
An OT network architect needs to secure control area zones with a single network access policy to provision devices to any number of different networks.
On which device can this be accomplished?

QUESTION 21
Which statemenl about the IEC 104 protocol is true?

QUESTION 22
Refer to the exhibit, which shows a non-protected OT environment.

An administrator needs to implement proper protection on the OT network.
Which three steps should an administrator take to protect the OT network? (Choose three.)

QUESTION 23
You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM. Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)

QUESTION 24
Refer to the exhibit.

An operational technology rule is created and successfully activated to monitor the Modbus protocol on FortiSIEM. However, the rule does not trigger incidents despite Modbus traffic and application logs being received correctly by FortiSIEM.
Which statement correctly describes the issue on the rule configuration?

QUESTION 25
Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic?
(Choose three.)

QUESTION 26
Refer to the exhibit. The IPS profile is added on all of the security policies on FortiGate. For an OT network, which statement of the IPS profile is true?

QUESTION 27
Refer to the exhibit.

Which statement about the interfaces shown in the exhibit is true?

QUESTION 28
What can be assigned using network access control policies?

QUESTION 29
Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)?
(Choose three.)

QUESTION 30
An OT administrator configured and ran a default application risk and control report in FortiAnalyzer to learn more about the key application crossing the network. However, the report output is empty despite the fact that some related real-time and historical logs are visible in the FortiAnalyzer.
What are two possible reasons why the report output was empty? (Choose two.)

QUESTION 31
An OT network architect needs to secure control area zones with a single network access policy to provision devices to any number of different networks. On which device can this be accomplished?

QUESTION 32
What two advantages does FortiNAC provide in the OT network? (Choose two.)

QUESTION 33
Refer to the exhibit.

An OT architect has implemented a Modbus TCP with a simulation server Conpot to identify and control the Modus traffic in the OT network. The FortiGate-Edge device is configured with a software switch interface ssw-01.
Based on the topology shown in the exhibit, which two statements about the successful simulation of traffic between client and server are true? (Choose two.)

QUESTION 34
Refer to the exhibit and analyze the output. Which statement about the output is true?

QUESTION 35
An OT administrator configured and ran a default application risk and control report in FortiAnalyzer to learn more about the key application crossing the network. However, the report output is empty despite the fact that some related real-time and historical logs are visible in the FortiAnalyzer. What are two possible reasons why the report output was empty? (Choose two.)

QUESTION 36
Refer to the exhibit.

An OT administrator ran a report to identify device inventory in an OT network.
Based on the report results, which report was run?

QUESTION 37
Refer to the exhibit.

Given the configurations on the FortiGate, which statement is true?

QUESTION 38
Refer to the exhibit. Which statement is true about application control inspection?

QUESTION 39
What is the main difference between real-time logs and historical logs on FortiAnalyzer?