NSE7_OTS-7.2 Fortinet NSE 7 - OT Security 7.2 Question and Answers

The OT network analyst runs different level of reports to quickly explore threats that exploit the network. Such reports can be run on all routers, switches, and firewalls. Which FortiSIEM reporting method helps to identify these type of exploits of image firmware files?

When device profiling rules are enabled, which devices connected on the network are evaluated by the device profiling rules?

Refer to the exhibits.

Which statement about some of the generated report elements from FortiAnalyzer is true?

Refer to the exhibit.

Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)

Which three Fortinet products can you use for device identification in an OT industrial control system (ICS)? (Choose three.)

An OT administrator has configured FSSO and local firewall authentication. A user who is part of a user group is not prompted from credentials during authentication.

What is a possible reason?

The OT network analyst run different level of reports to quickly explore failures that could put the network at risk. Such reports can be about device performance. Which FortiSIEM reporting method helps to identify device failures?

An OT administrator deployed many devices to secure the OT network. However, the SOC team is reporting that there are too many alerts, and that many of the alerts are false positive. The OT administrator would like to find a solution that eliminates repetitive tasks, improves efficiency, saves time, and saves resources.

Which products should the administrator deploy to address these issues and automate most of the manual tasks done by the SOC team?

To increase security protection in an OT network, how does application control on ForliGate detect industrial traffic?

What are two critical tasks the OT network auditors must perform during OT network risk assessment and management? (Choose two.)

Refer to the exhibit and analyze the output.

Which statement about the output is true?

You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM.

Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)

Which statemenl about the IEC 104 protocol is true?

Refer to the exhibit.

An OT administrator ran a report to identify device inventory in an OT network.

Based on the report results, which report was run?

What can be assigned using network access control policies?