Free Fortinet NSE 7 – OT Security 7.2 Exam NSE7_OTS-7.2 Exam Practice Test

When device profiling rules are enabled, which devices connected on the network are evaluated by the device profiling rules?

• Known trusted devices, each time they change location
• All connected devices, each time they connect
• Rogue devices, only when they connect for the first time
• Rogue devices, each time they connect

Which three common breach points can be found in a typical OT environment? (Choose three.)

• Global hat
• Hard hat
• VLAN exploits
• Black hat
• RTU exploits

As an OT administrator, it is important to understand how industrial protocols work in an OT network. Which communication method is used by the Modbus protocol?

• It uses OSI Layer 2 and the primary device sends data based on request from secondary device.
• It uses OSI Layer 2 and both the primary/secondary devices always send data during the communication.
• It uses OSI Layer 2 and both the primary/secondary devices send data based on a matching token ring.
• It uses OSI Layer 2 and the secondary device sends data based on request from primary device.

Which two statements are true when you deploy FortiGate as an ofline IDS? (Choose two.)

• FortiGate receives traffic from configured port mirroring.
• Network traffic goes through FortiGate.
• FortiGate acts as network sensor.
• Network attacks can be detected and blocked.

As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect exploits that affect PLCs.Which security sensor must implement to detect these types of industrial exploits?

• Intrusion prevention system (IPS)
• Deep packet inspection (DPI)
• Antivirus inspection
• Application control

You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM.Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)

• Security
• IPS
• List
• Risk
• Overview

What two advantages does FortiNAC provide in the OT network? (Choose two.)

• It can be used for IoT device detection.
• It can be used for industrial intrusion detection and prevention.
• It can be used for network micro-segmentation.
• It can be used for device profiling.

An OT administrator deployed many devices to secure the OT network. However, the SOC team is reporting that there are too many alerts, and that many of the alerts are false positive. The OT administrator would like to find a solution that eliminates repetitive tasks, improves efficiency, saves time, and saves resources.Which products should the administrator deploy to address these issues and automate most of the manual tasks done by the SOC team?

• FortiSIEM and FortiManager
• FortiSandbox and FortiSIEM
• FortiSOAR and FortiSIEM
• A syslog server and FortiSIEM

Which three methods of communication are used by FortiNAC to gather visibility information? (Choose three.)

• SNMP
• ICMP
• API
• RADIUS
• TACACS

Which three Fortinet products can you use for device identification in an OT industrial control system (ICS)? (Choose three.)

• FortiSIEM
• FortiManager
• FortiAnalyzer
• FortiGate
• FortiNAC