Fortinet NSE 7 - OT Security 7.2 (NSE7_OTS-7.2) Free Practice Test
Question 1
An OT customer is using multiple FortiGate devices in their network to implement two-factor authentication with hardware FortiTokens. A supervisor is carrying multiple FortiTokens to be used when logging in to a critical server behind different FortiGate devices.
As an OT network architect, which approach must you take in order to assign one token per user and still use two-factor authentication on multiple FortiGate devices?
As an OT network architect, which approach must you take in order to assign one token per user and still use two-factor authentication on multiple FortiGate devices?
Correct Answer: A
Question 2
As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect protocols from PLCs.
Which security sensor must you implement to detect protocols on the OT network?
Which security sensor must you implement to detect protocols on the OT network?
Correct Answer: D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 3
An OT architect has deployed a Layer 2 switch in the OT network at Level 1 in the Purdue model- process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs.
All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.
Which statement about the traffic between PLC1 and PLC2 is true?
All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.
Which statement about the traffic between PLC1 and PLC2 is true?
Correct Answer: C
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 4
To increase security protection in an OT network, how does application control on ForliGate detect industrial traffic?
Correct Answer: C
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 5
Refer to the exhibit. Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)
Correct Answer: A,B,C
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 6
Refer to the exhibit. An OT administrator ran a report to identify device inventory in an OT network.
Based on the report results, which report was run?
Based on the report results, which report was run?
Correct Answer: D
Question 7
Refer to the exhibit.A new operational technology rule is being created to monitor Modbus protocol traffic on FortiSIEM.
Which action will ensure all Modbus messages on the network match the rule?
Which action will ensure all Modbus messages on the network match the rule?
Correct Answer: D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 8
Refer to the exhibit, which shows a nonprotected OT environment. An administrator needs to implement appropriate protection on the OT network.
Which three steps should an administrator take to protect the OT network? (Choose three.)
Which three steps should an administrator take to protect the OT network? (Choose three.)
Correct Answer: A,C,D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 9
Which two frameworks are common to secure ICS industrial processes, including SCADA and DCS? (Choose two.)
Correct Answer: A,D
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).