Question 1

Refer to the exhibit.

The IPS profile is added on all of the security policies on FortiGate. For an OT network, which statement of the IPS profile is true?

Options :

A : FortiGate has no IPS industrial signature database enabled.

B : The listed IPS signatures are classified as SCADAapphcat nns

C : All IPS signatures are overridden and must block traffic match signature patterns.

D : The IPS profile inspects only traffic originating from SCADA equipment.

Answer: B

Question 2

Refer to the exhibit.

You are navigating through FortiSIEM in an OT network. How do you view information presented in the exhibit and what does the FortiGate device security status tell you?

Options :

A :

In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.

B :

In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device.

C : In the widget dashboard and there are one or more high-severity incidents for the FortiGate device.

D :

In the business service dashboard and there are one or more high-severity security incidents for the FortiGate device.

Answer: B

Question 3

What are two critical tasks the OT network auditors must perform during OT network risk assessment and management? (Choose two.)

Options :

A : Planning a threat hunting strategy

B : Implementing strategies to automatically bring PLCs offline

C : Creating disaster recovery plans to switch operations to a backup plant

D : Evaluating what can go wrong before it happens

Answer: B,C

Question 4

What are two benefits of a Nozomi integration with FortiNAC? (Choose two.)

Options :

A : Enhanced point of connection details

B : Direct VLAN assignment

C : Adapter consolidation for multi-adapter hosts

D : Importation and classification of hosts

Answer: A,D

Question 5

An OT network administrator is trying to implement active authentication. Which two methods should the administrator use to achieve this? (Choose two.)

Options :

A : Two-factor authentication on FortiAuthenticator

B : Role-based authentication on FortiNAC

C : FSSO authentication on FortiGate

D : Local authentication on FortiGate

Answer: A,D

Smartly Prepare Exam with Free Online NSE7_OTS-7.2.0 Practice Test

Buying Options: