NSE7_OTS-7.2問題集、Fortinet実際の試験問題

質問 1

What two advantages does FortiNAC provide in the OT network? (Choose two.)

A. It can be used for IoT device detection.

B. It can be used for network micro-segmentation.

C. It can be used for device profiling.

D. It can be used for industrial intrusion detection and prevention.

正解: A,C

解説: (PassTest メンバーにのみ表示されます)

質問 2

How can you achieve remote access and internel availability in an OT network?

A. Create a back-end backup network as a redundancy measure.

B. Add additional internal firewalls to access OT devices.

C. Create more access policies to prevent unauthorized access.

D. Implement SD-WAN to manage traffic on each ISP link.

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 3

Refer to the exhibit. Which statement about the interfaces shown in the exhibit is true?

A. port1, port1-vlan10, and port1-vlan1 are in different broadcast domains

B. The VLAN ID of port1-vlan1 can be changed to the VLAN ID 10.

C. port2, port2-vlan10, and port2-vlan1 are part of the software switch interface.

D. port1-vlan10 and port2-vlan10 are part of the same broadcast domain

正解: A

質問 4

An OT administrator has configured FSSO and local firewall authentication. A user who is part of a user group is not prompted for credentials during authentication.
What is a possible reason?

A. Two-factor authentication is not configured with RADIUS authentication method

B. The user was determined by Security Fabric

C. FortiNAC determined the user by DHCP fingerprint method

D. FortiGate determined the user by passive authentication

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 5

Refer to the exhibit. Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

A. FortiGate-3 and FortiGate-4 devices must be in a transparent mode.

B. Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.

C. IT and OT networks are separated by segmentation.

D. Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.

正解: B,C

解説: (PassTest メンバーにのみ表示されます)

質問 6

An administrator needs to group FortiGate wireless interfaces in NAT mode with multiple physical interfaces. What interface type must the administrator select to group multiple FortiGate interfaces with the wireless interface?

A. Software switch interface

B. Redundant interface

C. Aggregate interface

D. VLAN interface

正解: A

質問 7

Refer to the exhibit. You are creating a new operational technology (OT) rule to monitor Modbus protocol traffic on FortiSIEM.
Which action must you take to ensure that all Modbus messages on the network match the rule?

A. The condition on the SubPattern filter must use the AND logical operator.

B. In the Group By section, remove all attributes that are not configured in the Filter section.

C. In the Aggregate section, set the attribute value to equal to or greater than 0.

D. Add a new condition to filter Modbus traffic based on the source TCP/UDP port.

正解: C

解説: (PassTest メンバーにのみ表示されます)

質問 8

FortiAnalyzer is implemented in the OT network to receive logs from responsible FortiGate devices. The logs must be processed by FortiAnalyzer.
In this scenario, which statement is correct about the purpose of FortiAnalyzer receiving and processing multiple log messages from a given PLC or RTU?

A. To configure event handlers and take further action on FortiGate

B. To help OT administrators configure the network and prevent breaches

C. To isolate PLCs or RTUs in the event of external attacks

D. To determine which type of messages from the PLC or RTU causes issues in the plant

正解: D

解説: (PassTest メンバーにのみ表示されます)

質問 9

Refer to the exhibit. An operational technology (OT) network security audit concluded that the application sensor does not block the IEC.60870.5.104_Information.Trasfer.C.BO.NA.1 signature.
Which change must the OT network administrator make?

A. Change the security action of the industrial category to monitor.

B. Update the priority of the C.BO.NA.1 signature override to 1.

C. Remove IEC.60870.5.104_Information.Transfer.C.BO.NA.1 from the first filter override.

D. Set all application categories to apply default actions.

正解: B

解説: (PassTest メンバーにのみ表示されます)

Fortinet NSE 7 - OT Security 7.2 - NSE7_OTS-7.2 模擬練習