[2026] Get Top-Rated Fortinet NSE7_OTS-7.2 Exam Dumps Now

Passing Key To Getting NSE7_OTS-7.2 Certified Exam Engine PDF

NEW QUESTION # 51
Refer to the exhibit.

Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)

• A. FortiGate for SD-WAN
• B. FortiSIEM for security incident and event management
• C. FortiNAC for network access control
• D. FortiEDR for endpoint detection
• E. FortiGate for application control and IPS

Answer: C,D,E

NEW QUESTION # 52
In a wireless network integration, how does FortiNAC obtain connecting MAC address information?

• A. End station traffic monitoring
• B. RADIUS
• C. Link traps
• D. MAC notification traps

Answer: B

Explanation:
FortiNAC can integrate with RADIUS servers to obtain MAC address information for wireless clients that authenticate through the RADIUS server.
Reference:
Fortinet NSE 7 - OT Security 6.4 Study Guide, Chapter 4: OT Security Devices, page 4-28.

NEW QUESTION # 53
Refer to the exhibit.

An operational technology rule is created and successfully activated to monitor the Modbus protocol on FortiSIEM. However, the rule does not trigger incidents despite Modbus traffic and application logs being received correctly by FortiSIEM.
Which statement correctly describes the issue on the rule configuration?

• A. The first condition on the SubPattern filter must use the OR logical operator.
• B. The attributes in the Group By section must match the ones in Fitters section.
• C. The SubPattern is missing the filter to match the Modbus protocol.
• D. The Aggregate attribute COUNT expression is incompatible with the filters.

Answer: B

NEW QUESTION # 54
A FortiGate device is newly deployed as the edge gateway of an OT network security fabric. The downstream FortiGate devices are also newly deployed as Security Fabric leafs to protect the control area zone.
With no additional essential networking devices, and to implement micro-segmentation on this OT network, what configuration must the OT network architect apply to control intra-VLAN traffic?

• A. Enable security profiles on all interfaces connected in the control area zone.
• B. Create a software switch on each downstream FortiGate device.
• C. Enable transparent mode on the edge FortiGate device.
• D. Set up VPN tunnels between downstream and edge FortiGate devices.

Answer: B

NEW QUESTION # 55
Refer to the exhibit. Which statement is true about application control inspection?

• A. You can control security actions only on the parent-level application signature
• B. Security actions cannot be applied on the lowest level of the hierarchy.
• C. The industrial application control inspection process is unique among application categories.
• D. The parent signature takes precedence over the child application signature.

Answer: A

NEW QUESTION # 56
Refer to the exhibit. The network topology in the exhibit shows FortiGate devices as well as FortiAnalyzer and FortiSIEM for the OT network.
Which two steps must you take to configure logging on the OT network'? (Choose two.)

• A. Configure FortiGate to send logs to FortiAnalyzer and FortiSIEM.
• B. Configure FortiAnalyzer to send security events to FortiSIEM.
• C. Configure FortiSIEM to send logs and alerts to FortiAnalyzer.
• D. Configure FortiGate and FortiAnalyzer to send industrial signature patterns to FortiSIEM.

Answer: A,B

Explanation:
FortiGates must forward their logs directly to both FortiAnalyzer and FortiSIEM for storage and correlation. FortiAnalyzer then forwards relevant security events to FortiSIEM, enabling centralized analytics across OT devices.

NEW QUESTION # 57
Refer to the exhibit.

You need to configure VPN user access for supervisors at the breach and HQ sites using the same soft FortiToken. Each site has a FortiGate VPN gateway.
What must you do to achieve this objective?

• A. You must register the same FortiToken on more than one FortiGate.
• B. You must use a FortiAuthenticator.
• C. You must use a third-party RADIUS OTP server.
• D. You must use the user self-registration server.

Answer: B

NEW QUESTION # 58
Refer to the exhibit.

An OT administrator ran a report to identify device inventory in an OT network.
Based on the report results, which report was run?

• A. A FortiSIEM incident report
• B. A FortiSIEM analytics report
• C. A FortiAnalyzer device report
• D. A FortiSIEM CMDB report

Answer: D

NEW QUESTION # 59
Refer to the exhibit. You are creating a new operational technology (OT) rule to monitor Modbus protocol traffic on FortiSIEM.
Which action must you take to ensure that all Modbus messages on the network match the rule?

• A. In the Group By section, remove all attributes that are not configured in the Filter section.
• B. The condition on the SubPattern filter must use the AND logical operator.
• C. Add a new condition to filter Modbus traffic based on the source TCP/UDP port.
• D. In the Aggregate section, set the attribute value to equal to or greater than 0.

Answer: D

Explanation:
The current Aggregate condition is set to COUNT(Matched Events) >= 1, which only triggers the rule after at least one event. To ensure all Modbus messages (including the first one) match the rule, the condition must be >= 0, so every event is considered, including the very first occurrence.

NEW QUESTION # 60
An OT network architect must deploy a solution to protect fuel pumps in an industrial remote network. All the fuel pumps must be closely monitored from the corporate network for any temperature fluctuations.
How can the OT network architect achieve this goal?

• A. Configure a fuel server on the remote network, and deploy a FortiSIEM with a single pattern temperature performance rule on the corporate network.
• B. Configure both fuel server and FortiSIEM with a single-pattern temperature performance rule on the corporate network.
• C. Configure a fuel server on the corporate network, and deploy a FortiSIEM with a single pattern temperature performance rule on the remote network.
• D. Configure a fuel server on the remote network, and deploy a FortiSIEM with a single pattern temperature security rule on the corporate network.

Answer: A

Explanation:
This way, FortiSIEM can discover and monitor everything attached to the remote network and provide security visibility to the corporate network

NEW QUESTION # 61
Refer to the exhibit.

Which statement is true about application control inspection?

• A. You can control security actions only on the parent-level application signature
• B. Security actions cannot be applied on the lowest level of the hierarchy.
• C. The industrial application control inspection process is unique among application categories.
• D. The parent signature takes precedence over the child application signature.

Answer: A

NEW QUESTION # 62
Refer to the exhibit, which shows a non-protected OT environment.
An administrator needs to implement proper protection on the OT network.
Which three steps should an administrator take to protect the OT network? (Choose three.)

• A. Use segmentation
• B. Deploy a FortiGate device within each ICS network.
• C. Deploy an edge FortiGate between the internet and an OT network as a one-arm sniffer.
• D. Configure firewall policies with web filter to protect the different ICS networks.
• E. Configure firewall policies with industrial protocol sensors

Answer: A,B,E

NEW QUESTION # 63
in an operation technology (OT) network FortiAnalyzer is used to receive and process logs from responsible FortiGate devices Which statement about why FortiAnalyzer is receiving and processing multiple tog messages from a given programmable logic controller (PLC) or remote terminal unit (RTU) is true'?

• A. To determine which type of messages from the PLC or RTU causes issues in the plant
• B. To track external threats and prevent them attacking the OT network
• C. To isolate PLCs or RTUs in the event of external attacks
• D. To help OT administrators troubleshoot and diagnose the OT network

Answer: B

NEW QUESTION # 64
An OT architect has deployed a Layer 2 switch in the OT network at Level 1 the Purdue model- process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs. All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network. What statement about the traffic between PLC1 and PLC2 is true?

• A. The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.
• B. The Layer 2 switches routes any traffic to the FortiGate device through an Ethernet link.
• C. In order to communicate, PLC1 must be in the same VLAN as PLC2.
• D. PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.

Answer: D

Explanation:
The statement that is true about the traffic between PLC1 and PLC2 is that PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.

NEW QUESTION # 65
Refer to the exhibit.

Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

• A. Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.
• B. Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.
• C. FortiGate-3 and FortiGate-4 devices must be in a transparent mode.
• D. IT and OT networks are separated by segmentation.

Answer: B,D

NEW QUESTION # 66
When you create a user or host profile, which three criteria can you use? (Choose three.)

• A. Location
• B. Administrative group membership
• C. An existing access control policy
• D. Host or user attributes
• E. Host or user group memberships

Answer: A,D,E

Explanation:
Explanation
https://docs.fortinet.com/document/fortinac/9.2.0/administration-guide/15797/user-host-profiles

NEW QUESTION # 67
Refer to the exhibit.

PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT can send traffic to each other at the Layer 2 level.
What must the OT admin do to prevent Layer 2-level communication between PLC-3 and CLIENT?

• A. Enable explicit intra-switch policy to require firewall policies on FGT-2.
• B. Implement policy routes on FGT-2 to control traffic between devices.
• C. Create a VLAN for each device and replace the current FGT-2 software switch members.
• D. Set a unique forward domain for each interface of the software switch.

Answer: C,D

NEW QUESTION # 68
Refer to the exhibit.
Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

• A. Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.
• B. Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.
• C. FortiGate-3 and FortiGate-4 devices must be in a transparent mode.
• D. IT and OT networks are separated by segmentation.

Answer: B,D

NEW QUESTION # 69
The OT network analyst runs different level of reports to quickly explore threats that exploit the network. Such reports can be run on all routers, switches, and firewalls. Which FortiSIEM reporting method helps to identify these type of exploits of image firmware files?

• A. CMDB reports
• B. OT/loT reports
• C. Threat hunting reports
• D. Compliance reports

Answer: C

NEW QUESTION # 70
As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect exploits that affect PLCs.
Which security sensor must implement to detect these types of industrial exploits?

• A. Deep packet inspection (DPI)
• B. Antivirus inspection
• C. Intrusion prevention system (IPS)
• D. Application control

Answer: A

NEW QUESTION # 71
Refer to the exhibit. Based on the Purdue model, which three measures can be implemented in the control area zone using the Fortinet Security Fabric? (Choose three.)

• A. FortiGate for SD-WAN
• B. FortiSIEM for security incident and event management
• C. FortiNAC for network access control
• D. FortiEDR for endpoint detection
• E. FortiGate for application control and IPS

Answer: C,D,E

NEW QUESTION # 72
Refer to the exhibits.

Which statement is true about the traffic passing through to PLC-2?

• A. IEC 104 signatures are all allowed except the C.BO.NA 1 signature.
• B. IPS must be enabled to inspect application signatures.
• C. The application filter overrides the default action of some IEC 104 signatures.
• D. SSL Inspection must be set to deep-inspection to correctly apply application control.

Answer: C

NEW QUESTION # 73
Refer to the exhibit. Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

• A. Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.
• B. Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.
• C. FortiGate-3 and FortiGate-4 devices must be in a transparent mode.
• D. IT and OT networks are separated by segmentation.

Answer: B,D

Explanation:
Segmentation separates the IT side from the OT zones in the diagram. FortiGate-3 and FortiGate-4 sit closest to PLC/RTU traffic, so their policies must use industrial protocol sensors to inspect and control those OT flows.

NEW QUESTION # 74
......

NSE7_OTS-7.2 exam questions for practice in 2026 Updated 90 Questions: https://www.braindumpsit.com/NSE7_OTS-7.2_real-exam.html

NSE7_OTS-7.2 Exam Dumps Pass with Updated Tests Dumps: https://drive.google.com/open?id=1SZkJdyz2Aap1cxQEAi-ZB7r_0zEch8wH