Free Access Fortinet.NSE7_OTS-7.2.v2026-04-20.q89 Practice Test (Page 8)

Question 31

Refer to the exhibit.

Which statement is true about application control inspection?

A.Security actions cannot be applied on the lowest level of the hierarchy.

B.The industrial application control inspection process is unique among application categories.

C.You can control security actions only on the parent-level application signature

D.The parent signature takes precedence over the child application signature.

Question 32

Refer to the exhibit. Given the configurations on the FortiGate, which statement is true?

A.FortiGate is configured with forward-domains to reduce unnecessary traffic.

B.FortiGate is configured with forward-domains to forward only company domain website traffic.

C.FortiGate is configured with forward-domains to forward only domain controller traffic.

D.FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.

Question 33

Which three Fortinet products can be used for device identification in an OT industrial control system (ICS)? (Choose three.)

A.FortiNAC

B.FortiManager

C.FortiAnalyzer

D.FortiSIEM

E.FortiGate

Question 34

Refer to the exhibit. An operational technology rule is created and successfully activated to monitor the Modbus protocol on FortiSIEM. However, the rule does not trigger incidents despite Modbus traffic and application logs being received correctly by FortiSIEM.
Which statement correctly describes the issue on the rule configuration?

A.The first condition on the SubPattern filter must use the OR logical operator.

B.The attributes in the Group By section must match the ones in Fitters section.

C.The Aggregate attribute COUNT expression is incompatible with the filters.

D.The SubPattern is missing the filter to match the Modbus protocol.

Question 35

An OT administrator is defining an incident notification policy using FortiSIEM and would like to configure the system with a notification policy. If an incident occurs, the administrator would like to be able to intervene and block an IP address or disable a user in Active Directory from FortiSIEM.
Which step must the administrator take to achieve this task?

A.Configure a fabric connector with a notification policy on FortiSIEM to connect with FortiGate.

B.Create a notification policy and define a script/remediation on FortiSIEM.

C.Define a script/remediation on FortiManager and enable a notification rule on FortiSIEM.

D.Deploy a mitigation script on Active Directory and create a notification policy on FortiSIEM.

Other Version: 2327Fortinet.NSE7_OTS-7.2.v2024-10-24.q50; 1115Fortinet.NSE7_OTS-7.2.v2024-08-27.q34; 831Fortinet.NSE7_OTS-7.2.v2024-04-16.q18

Latest Upload: 150PaloAltoNetworks.SSE-Engineer.v2026-10-17.q44; 247Cisco.300-420.v2026-10-17.q324; 198Salesforce.MCE-Con-201.v2026-10-15.q108; 176EMC.NCA.v2026-10-15.q25; 277Apple.Apple-Device-Support.v2026-10-15.q159; 182F5.F5CAB3.v2026-10-14.q47; 185Oracle.1Z0-1048-25.v2026-10-14.q67; 263Cisco.300-730.v2026-10-14.q199; 257Salesforce.Sales-Admn-202.v2026-10-14.q160; 171ServSafe.ServSafe-Manager.v2026-10-13.q32

Question 31

Question 32

Question 33

Question 34

Question 35

Download PDF File