Free Fortinet NSE7_OTS-7.2 Exam Dumps Questions & Answers

Refer to the exhibit. An OT architect has implemented a Modbus TCP with a simulation server Conpot to identify and control the Modus traffic in the OT network. The FortiGate-Edge device is configured with a software switch interface ssw-01.
Based on the topology shown in the exhibit, which two statements about the successful simulation of traffic between client and server are true? (Choose two.)

• A.  Port5 is not a member of the software switch.
• B.  The FortiGate-Edge device must be in NAT mode.
• C.  The FortiGate devices is in offline IDS mode.
• D.  NAT is disabled in the FortiGate firewall policy from port3 to ssw-01.

What two advantages does FortiNAC provide in the OT network? (Choose two.)

• A.  It can be used for network micro-segmentation.
• B.  It can be used for device profiling.
• C.  It can be used for industrial intrusion detection and prevention.
• D.  It can be used for IoT device detection.

Which statement is correct about processing matched rogue devices by FortiNAC?

• A.  FortiNAC disables matching rule of previously-profiled rogue devices.
• B.  FortiNAC matches the rogue device with only one device profiling rule.
• C.  FortiNAC cannot revalidate matched devices.
• D.  FortiNAC remembers the matching rule of the rogue device.

Refer to the exhibit, which shows a non-protected OT environment.

An administrator needs to implement proper protection on the OT network. Which three steps should an administrator take to protect the OT network? (Choose three.)

• A.  Deploy an edge FortiGate between the internet and an OT network as a one-arm sniffer.
• B.  Deploy a FortiGate device within each ICS network.
• C.  Configure firewall policies with industrial protocol sensors
• D.  Use segmentation
• E.  Configure firewall policies with web filter to protect the different ICS networks.

Refer to the exhibits. Which statement about some of the generated report elements from FortiAnalyzer is true?

• A.  This report is predefined and is not available for customization.
• B.  The file types confirm the infected applications on the PLCs.
• C.  The report confirms Modbus and IEC 104 are the key applications crossing the network.
• D.  FortiGate collects the logs and generates the report to FortiAnalyzer.