Fortinet NSE 7 - OT Security 7.2 - NSE7_OTS-7.2 Exam Practice Test
Which three Fortinet products can you use for device identification in an OT industrial control system (ICS)? (Choose three.)
Correct Answer: B,C,D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Refer to the exhibit.A new operational technology rule is being created to monitor Modbus protocol traffic on FortiSIEM.
Which action will ensure all Modbus messages on the network match the rule?

Which action will ensure all Modbus messages on the network match the rule?

Correct Answer: D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Which two statements are true when you deploy FortiGate as an offline IDS? (Choose two.)
Correct Answer: A,D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM.
Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)
Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)
Correct Answer: A,B,E
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Which two statements about the Modbus protocol are true? (Choose two.)
Correct Answer: A,B
An OT administrator configured and ran a default application risk and control report in FortiAnalyzer to learn more about the key application crossing the network. However, the report output is empty despite the fact that some related real-time and historical logs are visible in the FortiAnalyzer.
What are two possible reasons why the report output was empty? (Choose two.)
What are two possible reasons why the report output was empty? (Choose two.)
Correct Answer: B,D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Which two of the following features do most industrial protocols lack? (Choose two.)
Correct Answer: C,D
Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).
Refer to the exhibit, which shows a non-protected OT environment.

An administrator needs to implement proper protection on the OT network. Which three steps should an administrator take to protect the OT network? (Choose three.)

An administrator needs to implement proper protection on the OT network. Which three steps should an administrator take to protect the OT network? (Choose three.)
Correct Answer: C,D,E
An OT supervisor needs to protect their network by implementing security with an industrial signature database on the FortiGate device.
Which statement about the industrial signature database on FortiGate is true?
Which statement about the industrial signature database on FortiGate is true?
Correct Answer: B