2024 Latest NSE7_OTS-7.2 DUMPS Q&As with Explanations Verified & Correct Answers [Q17-Q35]

QUESTION 17
Refer to the exhibits.

Which statement about some of the generated report elements from FortiAnalyzer is true?

QUESTION 18
Refer to the exhibit.

An operational technology rule is created and successfully activated to monitor the Modbus protocol on FortiSIEM. However, the rule does not trigger incidents despite Modbus traffic and application logs being received correctly by FortiSIEM.
Which statement correctly describes the issue on the rule configuration?

QUESTION 19
Refer to the exhibit.

You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

QUESTION 20
What can be assigned using network access control policies?

QUESTION 21
Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)?
(Choose three.)

QUESTION 22
An OT administrator has configured FSSO and local firewall authentication. A user who is part of a user group is not prompted from credentials during authentication.
What is a possible reason?

QUESTION 23
What are two critical tasks the OT network auditors must perform during OT network risk assessment and management? (Choose two.)

QUESTION 24
An OT network architect must deploy a solution to protect fuel pumps in an industrial remote network. All the fuel pumps must be closely monitored from the corporate network for any temperature fluctuations.
How can the OT network architect achieve this goal?

QUESTION 25
Refer to the exhibit.

PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT can send traffic to each other at the Layer 2 level.
What must the OT admin do to prevent Layer 2-level communication between PLC-3 and CLIENT?

QUESTION 26
How can you achieve remote access and internet availability in an OT network?

QUESTION 27
An OT architect has deployed a Layer 2 switch in the OT network at Level 1 the Purdue model-process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs.
All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.
What statement about the traffic between PLC1 and PLC2 is true?

QUESTION 28
Refer to the exhibit.

Which statement is true about application control inspection?

QUESTION 29
What triggers Layer 2 polling of infrastructure devices connected in the network?

QUESTION 30
An OT supervisor needs to protect their network by implementing security with an industrial signature database on the FortiGate device.
Which statement about the industrial signature database on FortiGate is true?

QUESTION 31
Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic?
(Choose three.)

QUESTION 32
Refer to the exhibit.

Which statement about the interfaces shown in the exhibit is true?

QUESTION 33
An OT network consists of multiple FortiGate devices. The edge FortiGate device is deployed as the secure gateway and is only allowing remote operators to access the ICS networks on site.
Management hires a third-party company to conduct health and safety on site. The third-party company must have outbound access to external resources.
As the OT network administrator, what is the best scenario to provide external access to the third-party company while continuing to secure the ICS networks?

QUESTION 34
Refer to the exhibit.

Given the configurations on the FortiGate, which statement is true?

QUESTION 35
Refer to the exhibit.

You are assigned to implement a remote authentication server in the OT network.
Which part of the hierarchy should the authentication server be part of?