NSE7_OTS-7.2 試験問題を無料オンラインアクセス

In the context of FortiNAC, what is a key feature of a logical network?

• A.It simplifies network access policy management by reducing the number of policies needed.
• B.It groups up to 10 VLANs into a single policy.
• C.It creates a one-to-one association between a network access policy and a VLAN.
• D.It can identify several endpoints with a single rule.

An organization has deployed an entry-level FortiGate device in their operational technology (OT) network. The administrator is looking for a simple solution to detect and block all network intrusions in that specific part of the network without any false positive activities.
Which solution should the administrator use to achieve this goal?

• A.Enable intrusion prevention system (IPS) and use the regular signature database.
• B.Enable the industrial signature database in the IPS global setting.
• C.Configure a local-in firewall policy.
• D.Block all foreign inbound traffic.

An OT architect has deployed a Layer 2 switch in the OT network at Level 1 in the Purdue model- process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs.
All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.
Which statement about the traffic between PLC1 and PLC2 is true?

• A.The FortiGate must be configured as a "Router on a stick" for intra-PLC communication.
• B.The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.
• C.The Layer 2 switch routes any traffic to the FortiGate device through an Ethernet link.
• D.In order to communicate, PLC1 must be in the same VLAN as PLC2.

As an OT network administrator, you are required to generate reports that primarily use the same type of data sent to FortiSIEM. These reports are based on the preloaded analytic searches.
Which two actions can you take on FortiSIEM to enhance running reports for future use? (Choose two.)

• A.Automate running these reports upon receiving new logs
• B.Export the preloaded analytics searches to an external syslog server
• C.Save the analytic searches and turn them into report definitions.
• D.Create custom reports to process additional analytic searches.

Refer to the exhibit. Given the configurations on the FortiGate, which statement is true?

• A.FortiGate is configured with forward-domains to forward only company domain website traffic.
• B.FortiGate is configured with forward-domains to forward only domain controller traffic.
• C.FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.
• D.FortiGate is configured with forward-domains to reduce unnecessary traffic.