Fortinet NSE 7 - OT Security 7.2 - NSE7_OTS-7.2 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

What is the main difference between real-time logs and historical logs on FortiAnalyzer?

A. Historical logs are compressed and real-time logs are indexed in the SQL database. B. Real-time logs are indexed while historical logs are compressed in the SQL database. C. Historical logs are indexed in the SQL database, but real-time logs are not. D. Real-time logs are indexed in the SQL database, but historical logs are not.

Discussion 0

Correct Answer: C Vote an answer

Question 2

What are two critical tasks the OT network auditors must perform during OT network risk assessment and management? (Choose two.)

A. Evaluating what can go wrong before it happens B. Planning a threat hunting strategy C. Creating disaster recovery plans to switch operations to a backup plant D. Implementing strategies to automatically bring PLCs offline

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

In the context of FortiNAC, what is a key feature of a logical network?

A. It groups up to 10 VLANs into a single policy. B. It can identify several endpoints with a single rule. C. It creates a one-to-one association between a network access policy and a VLAN. D. It simplifies network access policy management by reducing the number of policies needed.

Discussion 0

Correct Answer: D Vote an answer

Question 4

Refer to the exhibit. From your analysis of the output, which statement about the output is true?

A. This is a sample of a FortiAnalyzer system interface event log. B. This is a sample of a PAM event type. C. This is a sample of an SNMP temperature control event log. D. This is a sample of FortiGate interface statistics.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

Which statement about how FortiNAC re-evaluates previously profiled devices is true?

A. FortiNAC remembers the matching rule of the rogue device. B. FortiNAC matches the rogue device with only one device profiling rule. C. FortiNAC considers rogue devices as known endpoints. D. FortiNAC detects rogue devices by the IP address.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)

A. Services defined in the firewall policy. B. Source defined as internet services in the firewall policy C. Highest to lowest priority defined in the firewall policy D. Destination defined as internet services in the firewall policy E. Lowest to highest policy ID number

Discussion 0

Correct Answer: A,B,D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

Refer to the exhibit. You are navigating through FortiSIEM in an OT network. How do you view information presented in the exhibit and what does the FortiGate device security status tell you?

A. In the business service dashboard and there are one or more high-severity security incidents for the FortiGate device. B. In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device. C. In the widget dashboard and there are one or more high-severity incidents for the FortiGate device. D. In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.

Discussion 0

Correct Answer: B Vote an answer

Question 8

Which three methods of communication are used by FortiNAC to gather visibility information?
(Choose three.)

A. ICMP B. RADIUS C. API D. SNMP E. TACACS

Discussion 0

Correct Answer: B,C,D Vote an answer

Question 9

Refer to the exhibit. Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

A. Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors. B. IT and OT networks are separated by segmentation. C. Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices. D. FortiGate-3 and FortiGate-4 devices must be in a transparent mode.

Discussion 0

Correct Answer: A,B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).