Online Access Free NSE7_OTS-7.2 Exam Questions

Refer to the exhibit.A new operational technology rule is being created to monitor Modbus protocol traffic on FortiSIEM.
Which action will ensure all Modbus messages on the network match the rule?

• A.Set the Aggregate attribute value to equal to or greater than zero.
• B.Add a new condition to filter Modbus traffic based on the Source TCP/UDP port.
• C.This rule is valid and requires no additional changes.
• D.Remove attributes in the Group By section that are not configured in the Filter section.

Refer to the exhibit. In order for a FortiGate device to act as router on a stick, what configuration must an OT network architect implement on FortiGate to achieve inter-VLAN routing?

• A.Set a FortiGate interface with the switch to operate as an 802.1 q trunk.
• B.Set a software switch on FortiGate to handle inter-VLAN traffic.
• C.Set FortiGate to operate in transparent mode.
• D.Set a unique forward domain on each interface on the network.

Refer to the exhibit, which shows a nonprotected OT environment. An administrator needs to implement appropriate protection on the OT network.
Which three steps should an administrator take to protect the OT network? (Choose three.)

• A.Deploy a FortiGate device within each ICS network.
• B.Configure firewall policies with industrial protocol sensors.
• C.Deploy an edge FortiGate between the internet and the OT network as a one-arm sniffer.
• D.Use segmentation.
• E.Configure firewall policies with web filtering to protect the different ICS networks.

Refer to the exhibit. You are creating a new operational technology (OT) rule to monitor Modbus protocol traffic on FortiSIEM.
Which action must you take to ensure that all Modbus messages on the network match the rule?

• A.In the Aggregate section, set the attribute value to equal to or greater than 0.
• B.The condition on the SubPattern filter must use the AND logical operator.
• C.In the Group By section, remove all attributes that are not configured in the Filter section.
• D.Add a new condition to filter Modbus traffic based on the source TCP/UDP port.

Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)

• A.Lowest to highest policy ID number
• B.Services defined in the firewall policy.
• C.Source defined as internet services in the firewall policy
• D.Destination defined as internet services in the firewall policy
• E.Highest to lowest priority defined in the firewall policy