Question 1

Refer to the exhibit.

You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway. What must you do to achieve this objective?

Options :

A : You must use a FortiAuthenticator.

B : You must register the same FortiToken on more than one FortiGate.

C : You must use the user self-registration server.

D : You must use a third-party RADIUS OTP server.

Answer: A

Question 2

Refer to the exhibit.

Given the configurations on the FortiGate, which statement is true?

Options :

A : FortiGate is configured with forward-domains to reduce unnecessary traffic.

B : FortiGate is configured with forward-domains to forward only domain controller traffic.

C : FortiGate is configured with forward-domains to forward only company domain website traffic.

D : FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.

Answer: A

Question 3

Refer to the exhibit.

Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

Options :

A :

Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.

B :

Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.

C : IT and OT networks are separated by segmentation.

D : FortiGate-3 and FortiGate-4 devices must be in a transparent mode.

Answer: A,C

Question 4

A FortiGate device is newly deployed as the edge gateway of an OT network security fabric. The downstream FortiGate devices are also newly deployed as Security Fabric leafs to protect the control area zone. With no additional essential networking devices, and to implement micro-segmentation on this OT network, what configuration must the OT network architect apply to control intra-VLAN traffic?

Options :

A : Enable transparent mode on the edge FortiGate device.

B : Enable security profiles on all interfaces connected in the control area zone.

C : Set up VPN tunnels between downstream and edge FortiGate devices.

D : Create a software switch on each downstream FortiGate device.

Answer: B

Question 5

Refer to the exhibits.

Which statement about some of the generated report elements from FortiAnalyzer is true?

Options :

A : The report confirms Modbus and IEC 104 are the key applications crossing the network

B : FortiGate collects the logs and generates the report to FortiAnalyzer.

C : The file types confirm the infected applications on the PLCs.

D : This report is predefined and is not available for customization.

Answer: A

Confidently Practice Online with Free NSE7_OTS-7.2.0 Exam Cram

Buying Options: