NSE7_OTS-7.2試験無料問題集（90題）「Fortinet NSE 7

出題：1

With the limit of using one firewall device, the administrator enables multi-VDOM on FortiGate to provide independent multiple security domains to each ICS network.
Which statement ensures security protection is in place for all ICS networks?

A. Each VDOM must have an independent security license.

B. The management VDOM must have access to all global security services.

C. Each traffic VDOM must have a direct connection to FortiGuard services to receive the required security updates.

D. Traffic between VDOMs must pass through the physical interfaces of FortiGate to check for security incidents.

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

Which two statements about FortiSIEM are true? (Choose two.)

A. FortiSIEM cannot receive data from a Windows server without an agent.

B. FortiSIEM can receive data from certain devices in SQL format.

C. FortiSIEM can receive and collect data from network devices and applications.

D. FortiSIEM can receive data from any network device and application.

正解：A,C 解答を投票する

出題：3

An OT supervisor has configured LDAP and FSSO for authentication. The goal is that all users be authenticated against passive authentication first and. if passive authentication is not successful, then users should be challenged with active authentication.
What should the OT supervisor do to achieve this on FortiGate?

A. Configure a firewall policy with FSSO users and place it on the top of list of firewall policies.

B. Enable two-factor authentication with FSSO.

C. Configure a firewall policy with LDAP users and place it on the top of list of firewall policies.

D. Under config user settings configure set auth-on-demand implicit.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

Which two frameworks are common to secure ICS industrial processes, including SCADA and DCS? (Choose two.)

A. NIST Cybersecurity

B. IEC 104

C. Modbus

D. IEC 62443

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

Which statement about how FortiNAC re-evaluates previously profiled devices is true?

A. FortiNAC remembers the matching rule of the rogue device.

B. FortiNAC considers rogue devices as known endpoints.

C. FortiNAC matches the rogue device with only one device profiling rule.

D. FortiNAC detects rogue devices by the IP address.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

An OT administrator has configured FSSO and local firewall authentication. A user who is part of a user group is not prompted for credentials during authentication.
What is a possible reason?

A. FortiGate determined the user by passive authentication

B. FortiNAC determined the user by DHCP fingerprint method

C. The user was determined by Security Fabric

D. Two-factor authentication is not configured with RADIUS authentication method

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

An OT architect has deployed a Layer 2 switch in the OT network at Level 1 in the Purdue model- process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs.
All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.
Which statement about the traffic between PLC1 and PLC2 is true?

A. The FortiGate must be configured as a "Router on a stick" for intra-PLC communication.

B. The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.

C. In order to communicate, PLC1 must be in the same VLAN as PLC2.

D. The Layer 2 switch routes any traffic to the FortiGate device through an Ethernet link.

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

In a wireless network integration, how does FortiNAC obtain connecting MAC address information?

A. RADIUS

B. End station traffic monitoring

C. MAC notification traps

D. Link traps

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：9

FortiAnalyzer is implemented in the OT network to receive logs from responsible FortiGate devices. The logs must be processed by FortiAnalyzer.
In this scenario, which statement is correct about the purpose of FortiAnalyzer receiving and processing multiple log messages from a given PLC or RTU?

A. To determine which type of messages from the PLC or RTU causes issues in the plant

B. To help OT administrators configure the network and prevent breaches

C. To configure event handlers and take further action on FortiGate

D. To isolate PLCs or RTUs in the event of external attacks

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

NSE7_OTS-7.2試験無料問題集「Fortinet NSE 7 - OT Security 7.2 認定」