NSE7_OTS-7.2 Fortinet NSE 7 - OT Security 7.2 Questions and Answers

As an OT network administrator you are managing three FortiGate devices that each protect different levels on the Purdue model To increase traffic visibility you are required to implement additional security measures to detect protocols from PLCs

Which security sensor must you implement to detect protocols on the OT network?

When you create a user or host profile, which three criteria can you use? (Choose three.)

Which statement is correct about processing matched rogue devices by FortiNAC?

What can be assigned using network access control policies?

Which three methods of communication are used by FortiNAC to gather visibility information? (Choose three.)

How can you achieve remote access and internet availability in an OT network?

An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.

Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

Refer to the exhibit.

PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT can send traffic to each other at the Layer 2 level.

What must the OT admin do to prevent Layer 2-level communication between PLC-3 and CLIENT?

Refer to the exhibit.

You are assigned to implement a remote authentication server in the OT network.

Which part of the hierarchy should the authentication server be part of?

Refer to the exhibit.

Given the configurations on the FortiGate, which statement is true?

The OT network analyst runs different level of reports to quickly explore threats that exploit the network. Such reports can be run on all routers, switches, and firewalls. Which FortiSIEM reporting method helps to identify these type of exploits of image firmware files?

To increase security protection in an OT network, how does application control on ForliGate detect industrial traffic?

When device profiling rules are enabled, which devices connected on the network are evaluated by the device profiling rules?

Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)? (Choose three.)

in an operation technology (OT) network FortiAnalyzer is used to receive and process logs from responsible FortiGate devices

Which statement about why FortiAnalyzer is receiving and processing multiple tog messages from a given programmable logic controller (PLC) or remote terminal unit (RTU) is true'?

Refer to the exhibit.

You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.

What must you do to achieve this objective?

Which three common breach points can be found in a typical OT environment? (Choose three.)