Question 1

Refer to the exhibit.

Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

Options :

A :

Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.

B :

Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.

C : IT and OT networks are separated by segmentation.

D : FortiGate-3 and FortiGate-4 devices must be in a transparent mode.

Answer: A,C

Question 2

A FortiGate device is newly deployed as the edge gateway of an OT network security fabric. The downstream FortiGate devices are also newly deployed as Security Fabric leafs to protect the control area zone. With no additional essential networking devices, and to implement micro-segmentation on this OT network, what configuration must the OT network architect apply to control intra-VLAN traffic?

Options :

A : Enable transparent mode on the edge FortiGate device.

B : Enable security profiles on all interfaces connected in the control area zone.

C : Set up VPN tunnels between downstream and edge FortiGate devices.

D : Create a software switch on each downstream FortiGate device.

Answer: B

Question 3

Refer to the exhibits.

Which statement about some of the generated report elements from FortiAnalyzer is true?

Options :

A : The report confirms Modbus and IEC 104 are the key applications crossing the network

B : FortiGate collects the logs and generates the report to FortiAnalyzer.

C : The file types confirm the infected applications on the PLCs.

D : This report is predefined and is not available for customization.

Answer: A

Question 4

Which three common breach points can be found in a typical OT environment? (Choose three.)

Options :

A : Global hat

B : Hard hat

C : VLAN exploits

D : Black hat

E : RTU exploits

Answer: B,D,E

Question 5

Refer to the exhibit.

Given the configurations on the FortiGate, which statement is true?

Options :

A : FortiGate is configured with forward-domains to reduce unnecessary traffic.

B : FortiGate is configured with forward-domains to forward only domain controller traffic.

C : FortiGate is configured with forward-domains to forward only company domain website traffic.

D : FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.

Answer: A

Free NSE7_OTS-7.2.0 Mock Exam – Practice Online Confidently

Buying Options: