Online Access Free NSE7_OTS-7.2 Practice Test

Refer to the exhibit. An OT network architect must implement inter-VLAN routing in the topology.
Traffic from each client is tagged with a unique VLAN. Each client is directly connected to a Layer
2 switch.
Which action must the OT network architect take to achieve this goal?

• A.Make FortiGate a router on a stick.
• B.Replace the switch with a Layer 3 device.
• C.Configure a software switch to handle traffic for each client.
• D.Set the same forward domain on each switch interface.

Refer to the exhibit. You are creating a new operational technology (OT) rule to monitor Modbus protocol traffic on FortiSIEM.
Which action must you take to ensure that all Modbus messages on the network match the rule?

• A.In the Group By section, remove all attributes that are not configured in the Filter section.
• B.The condition on the SubPattern filter must use the AND logical operator.
• C.In the Aggregate section, set the attribute value to equal to or greater than 0.
• D.Add a new condition to filter Modbus traffic based on the source TCP/UDP port.

Which statement is correct about processing matched rogue devices by FortiNAC?

• A.FortiNAC matches the rogue device with only one device profiling rule.
• B.FortiNAC remembers the matching rule of the rogue device.
• C.FortiNAC disables matching rule of previously-profiled rogue devices.
• D.FortiNAC cannot revalidate matched devices.

Which two statements about FortiSIEM are true? (Choose two.)

• A.FortiSIEM can receive data from any network device and application.
• B.FortiSIEM cannot receive data from a Windows server without an agent.
• C.FortiSIEM can receive and collect data from network devices and applications.
• D.FortiSIEM can receive data from certain devices in SQL format.

An OT supervisor has configured LDAP and FSSO for authentication. The goal is that all users be authenticated against passive authentication first and. if passive authentication is not successful, then users should be challenged with active authentication.
What should the OT supervisor do to achieve this on FortiGate?

• A.Enable two-factor authentication with FSSO.
• B.Configure a firewall policy with LDAP users and place it on the top of list of firewall policies.
• C.Under config user settings configure set auth-on-demand implicit.
• D.Configure a firewall policy with FSSO users and place it on the top of list of firewall policies.