NSE7_OTS-7.2 Exam Dumps - Fortinet NSE 7 - OT Security 7.2

Go to page:

Question # 9

An OT network architect must deploy a solution to protect fuel pumps in an industrial remote network. All the fuel pumps must be closely monitored from the corporate network for any temperature fluctuations.

How can the OT network architect achieve this goal?

Configure a fuel server on the remote network, and deploy a FortiSIEM with a single pattern temperature security rule on the corporate network.

Configure a fuel server on the corporate network, and deploy a FortiSIEM with a single pattern temperature performance rule on the remote network.

Configure a fuel server on the remote network, and deploy a FortiSIEM with a single pattern temperature performance rule on the corporate network.

Configure both fuel server and FortiSIEM with a single-pattern temperature performance rule on the corporate network.

Full Access

Question # 10

Which three common breach points can be found in a typical OT environment? (Choose three.)

Global hat

Hard hat

VLAN exploits

Black hat

RTU exploits

Full Access

Question # 11

With the limit of using one firewall device, the administrator enables multi-VDOM on FortiGate to provide independent multiple security domains to each ICS network. Which statement ensures security protection is in place for all ICS networks?

Each traffic VDOM must have a direct connection to FortiGuard services to receive the required security updates.

The management VDOM must have access to all global security services.

Each VDOM must have an independent security license.

Traffic between VDOMs must pass through the physical interfaces of FortiGate to check for security incidents.

Full Access

Question # 12

Refer to the exhibit.

You are navigating through FortiSIEM in an OT network.

How do you view information presented in the exhibit and what does the FortiGate device security status tell you?

In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.

In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device.

In the widget dashboard and there are one or more high-severity incidents for the FortiGate device.

In the business service dashboard and there are one or more high-severity security incidents for the FortiGate device.

Full Access

Question # 13

Refer to the exhibits.

Which statement about some of the generated report elements from FortiAnalyzer is true?

The report confirms Modbus and IEC 104 are the key applications crossing the network.

FortiGate collects the logs and generates the report to FortiAnalyzer.

The file types confirm the infected applications on the PLCs.

This report is predefined and is not available for customization.

Full Access

Question # 14

As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect exploits that affect PLCs.

Which security sensor must implement to detect these types of industrial exploits?

Intrusion prevention system (IPS)

Deep packet inspection (DPI)

Antivirus inspection

Application control

Full Access

Question # 15

Which three Fortinet products can you use for device identification in an OT industrial control system (ICS)? (Choose three.)

FortiSIEM

FortiManager

FortiAnalyzer

FortiGate