FCSS in OT Security NSE7_OTS-7.2 Exam Dumps

dumps2024-04-16T09:20:57+08:00

To earn FCSS in OT Security certification, passing the core exam – NSE7_OTS-7.2 is a required step. There are 35 questions in the real Fortinet certification NSE7_OTS-7.2 exam, and you have 60 minutes to answer all the questions. The available language is English. We provide the latest FCSS in OT Security NSE7_OTS-7.2 exam dumps, which are the best material for you to study and pass this core exam. Free Fortinet FCSS in OT Security NSE7_OTS-7.2 exam dumps are below.

Page 1 of 2

1. To increase security protection in an OT network, how does application control on ForliGate detect industrial traffic?

By inspecting software and software-based vulnerabilities

By inspecting applications only on nonprotected traffic

By inspecting applications with more granularity by inspecting subapplication traffic

By inspecting protocols used in the application traffic

2. Which three methods of communication are used by FortiNAC to gather visibility information? (Choose three.)

SNMP

ICMP

API

RADIUS

TACACS

3. An OT network architect must deploy a solution to protect fuel pumps in an industrial remote network. All the fuel pumps must be closely monitored from the corporate network for any temperature fluctuations.

How can the OT network architect achieve this goal?

Configure a fuel server on the remote network, and deploy a FortiSIEM with a single pattern temperature security rule on the corporate network.

Configure a fuel server on the corporate network, and deploy a FortiSIEM with a single pattern temperature performance rule on the remote network.

Configure a fuel server on the remote network, and deploy a FortiSIEM with a single pattern temperature performance rule on the corporate network.

Configure both fuel server and FortiSIEM with a single-pattern temperature performance rule on the corporate network.

4. In a wireless network integration, how does FortiNAC obtain connecting MAC address information?

RADIUS

Link traps

End station traffic monitoring

MAC notification traps

5. An OT administrator configured and ran a default application risk and control report in FortiAnalyzer to learn more about the key application crossing the network. However, the report output is empty despite the fact that some related real-time and historical logs are visible in the FortiAnalyzer.

What are two possible reasons why the report output was empty? (Choose two.)

The administrator selected the wrong logs to be indexed in FortiAnalyzer.

The administrator selected the wrong time period for the report.

The administrator selected the wrong devices in the Devices section.

The administrator selected the wrong hcache table for the report.

6. Refer to the exhibit.

PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT can send traffic to each other at the Layer 2 level.

What must the OT admin do to prevent Layer 2-level communication between PLC-3 and CLIENT?

Set a unique forward domain for each interface of the software switch.

Create a VLAN for each device and replace the current FGT-2 software switch members.

Enable explicit intra-switch policy to require firewall policies on FGT-2.

Implement policy routes on FGT-2 to control traffic between devices.

7. An OT network administrator is trying to implement active authentication.

Which two methods should the administrator use to achieve this? (Choose two.)

Two-factor authentication on FortiAuthenticator

Role-based authentication on FortiNAC

FSSO authentication on FortiGate

Local authentication on FortiGate

8. An OT administrator is defining an incident notification policy using FortiSIEM and would like to configure the system with a notification policy. If an incident occurs, the administrator would like to be able to intervene and block an IP address or disable a user in Active Directory from FortiSIEM.

Which step must the administrator take to achieve this task?

Configure a fabric connector with a notification policy on FortiSIEM to connect with FortiGate.

Create a notification policy and define a script/remediation on FortiSIE

Define a script/remediation on FortiManager and enable a notification rule on FortiSIE

Deploy a mitigation script on Active Directory and create a notification policy on FortiSIE

9. Refer to the exhibit.

An OT architect has implemented a Modbus TCP with a simulation server Conpot to identify and control the Modus traffic in the OT network. The FortiGate-Edge device is configured with a software switch interface ssw-01.

Based on the topology shown in the exhibit, which two statements about the successful simulation of traffic between client and server are true? (Choose two.)

The FortiGate-Edge device must be in NAT mode.

NAT is disabled in the FortiGate firewall policy from port3 to ssw-01.

The FortiGate devices is in offline IDS mode.

Port5 is not a member of the software switch.

10. Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)? (Choose three.)

A. FortiNAC

B. FortiManager

C. FortiAnalyzer

D. FortiSIEM

E. FortiGate

Page 2 of 2

11. An OT network consists of multiple FortiGate devices. The edge FortiGate device is deployed as the secure gateway and is only allowing remote operators to access the ICS networks on site.

Management hires a third-party company to conduct health and safety on site. The third-party company must have outbound access to external resources.

As the OT network administrator, what is the best scenario to provide external access to the third-party company while continuing to secure the ICS networks?

Configure outbound security policies with limited active authentication users of the third-party company.

Create VPN tunnels between downstream FortiGate devices and the edge FortiGate to protect ICS network traffic.

Split the edge FortiGate device into multiple logical devices to allocate an independent VDOM for the third-party company.

Implement an additional firewall using an additional upstream link to the internet.

12. When you create a user or host profile, which three criteria can you use? (Choose three.)

Host or user group memberships

Administrative group membership

An existing access control policy

Location

Host or user attributes

13. Which two statements about the Modbus protocol are true? (Choose two.)

Modbus uses UDP frames to transport MBAP and function codes.

Most of the PLC brands come with a built-in Modbus module.

You can implement Modbus networking settings on internetworking devices.

Modbus is used to establish communication between intelligent devices.

14. Which three common breach points can be found in a typical OT environment? (Choose three.)

Global hat

Hard hat

VLAN exploits

Black hat

RTU exploits

15. An OT supervisor needs to protect their network by implementing security with an industrial signature database on the FortiGate device.

Which statement about the industrial signature database on FortiGate is true?

A supervisor must purchase an industrial signature database and import it to the FortiGate.

An administrator must create their own database using custom signatures.

By default, the industrial database is enabled.

A supervisor can enable it through the FortiGate CL

FCSS in OT Security NSE7_OTS-7.2 Exam Dumps

FCSS in OT Security NSE7_OTS-7.2 Exam Dumps

Share this post

Leave a Reply Cancel reply

Related Posts