Free Fortinet NSE 7 – OT Security 7.2 Exam NSE7_OTS-7.2 Exam Practice Test

Which three common breach points can be found in a typical OT environment? (Choose three.)

• Global hat
• Hard hat
• VLAN exploits
• Black hat
• RTU exploits

What two advantages does FortiNAC provide in the OT network? (Choose two.)

• It can be used for IoT device detection.
• It can be used for industrial intrusion detection and prevention.
• It can be used for network micro-segmentation.
• It can be used for device profiling.

Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)

• Services defined in the firewall policy.
• Source defined as internet services in the firewall policy
• Lowest to highest policy ID number
• Destination defined as internet services in the firewall policy
• Highest to lowest priority defined in the firewall policy

What triggers Layer 2 polling of infrastructure devices connected in the network?

• A failed Layer 3 poll
• A matched security policy
• A matched profiling rule
• A linkup or linkdown trap

Which two statements about the Modbus protocol are true? (Choose two.)

• Modbus uses UDP frames to transport MBAP and function codes.
• Most of the PLC brands come with a built-in Modbus module.
• You can implement Modbus networking settings on internetworking devices.
• Modbus is used to establish communication between intelligent devices.

How can you achieve remote access and internet availability in an OT network?

• Create a back-end backup network as a redundancy measure.
• Implement SD-WAN to manage traffic on each ISP link.
• Add additional internal firewalls to access OT devices.
• Create more access policies to prevent unauthorized access.

What can be assigned using network access control policies?

• Layer 3 polling intervals
• FortiNAC device polling methods
• Logical networks
• Profiling rules

Which type of attack posed by skilled and malicious users of security level 4 (SL 4) of IEC 62443 is designed to defend against intentional attacks?

• Users with access to moderate resources
• Users with low access to resources
• Users with unintentional operator error
• Users with substantial resources

When you create a user or host profile, which three criteria can you use? (Choose three.)

• Host or user group memberships
• Administrative group membership
• An existing access control policy
• Location
• Host or user attributes

An OT network architect must deploy a solution to protect fuel pumps in an industrial remote network. All the fuel pumps must be closely monitored from the corporate network for any temperature fluctuations.How can the OT network architect achieve this goal?

• Configure a fuel server on the remote network, and deploy a FortiSIEM with a single pattern temperature security rule on the corporate network.
• Configure a fuel server on the corporate network, and deploy a FortiSIEM with a single pattern temperature performance rule on the remote network.
• Configure a fuel server on the remote network, and deploy a FortiSIEM with a single pattern temperature performance rule on the corporate network.
• Configure both fuel server and FortiSIEM with a single-pattern temperature performance rule on the corporate network.