NSE7_OTS-7.2 試験問題を無料オンラインアクセス

What are two critical tasks the OT network auditors must perform during OT network risk assessment and management? (Choose two.)

• A.Evaluating what can go wrong before it happens
• B.Implementing strategies to automatically bring PLCs offline
• C.Creating disaster recovery plans to switch operations to a backup plant
• D.Planning a threat hunting strategy

Refer to the exhibit.

In order for a FortiGate device to act as router on a stick, what configuration must an OT network architect implement on FortiGate to achieve inter-VLAN routing?

• A.Set a FortiGate interface with the switch to operate as an 802.1 q trunk.
• B.Set FortiGate to operate in transparent mode.
• C.Set a unique forward domain on each interface on the network.
• D.Set a software switch on FortiGate to handle inter-VLAN traffic.

Which two statements about the Modbus protocol are true? (Choose two.)

• A.You can implement Modbus networking settings on internetworking devices.
• B.Most of the PLC brands come with a built-in Modbus module.
• C.Modbus is used to establish communication between intelligent devices.
• D.Modbus uses UDP frames to transport MBAP and function codes.

An OT architect has deployed a Layer 2 switch in the OT network at Level 1 the Purdue model-process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs.
All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.
What statement about the traffic between PLC1 and PLC2 is true?

• A.In order to communicate, PLC1 must be in the same VLAN as PLC2.
• B.The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.
• C.The Layer 2 switches routes any traffic to the FortiGate device through an Ethernet link.
• D.PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.

Refer to the exhibit.

PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT cannot send traffic to each other.
Which two statements about the traffic between PCL-1 and PLC-2 are true? (Choose two.)

• A.Micro-segmentation on FGT-2 prevents direct device-to-device communication.
• B.FGT-2 controls intra-VLAN traffic through firewall policies.
• C.Traffic must be inspected by FGT-EDGE in OT networks.
• D.The switch on FGT-2 must be hardware to implement micro-segmentation.