Fortinet NSE7_OTS-7.2 問題集

質問 1：
Refer to the exhibit. Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

A. IT and OT networks are separated by segmentation.
B. Micro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.
C. FortiGate-3 and FortiGate-4 devices must be in a transparent mode.
D. Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 2：
Which type of attack posed by skilled and malicious users of security level 4 (SL 4) of IEC 62443 is designed to defend against intentional attacks?
A. Users with low access to resources
B. Users with access to moderate resources
C. Users with substantial resources
D. Users with unintentional operator error
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 3：
An administrator needs to group FortiGate wireless interfaces in NAT mode with multiple physical interfaces. What interface type must the administrator select to group multiple FortiGate interfaces with the wireless interface?
A. Software switch interface
B. Redundant interface
C. VLAN interface
D. Aggregate interface
正解：A

質問 4：
How can you achieve remote access and internel availability in an OT network?
A. Create a back-end backup network as a redundancy measure.
B. Create more access policies to prevent unauthorized access.
C. Implement SD-WAN to manage traffic on each ISP link.
D. Add additional internal firewalls to access OT devices.
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 5：
As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect protocols from PLCs.
Which security sensor must you implement to detect protocols on the OT network?
A. Deep packet inspection (DPI)
B. Application control (AC)
C. Intrusion prevention system (IPS)
D. Antivirus inspection
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Which two statements are true when you deploy FortiGate as an offline IDS? (Choose two.)
A. FortiGate acts as network sensor.
B. Network attacks can be detected and blocked.
C. FortiGate receives traffic from configured port mirroring.
D. Network traffic goes through FortiGate.
正解：A,C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
Refer to the exhibit. You are navigating through FortiSIEM in an OT network. How do you view information presented in the exhibit and what does the FortiGate device security status tell you?

A. In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.
B. In the business service dashboard and there are one or more high-severity security incidents for the FortiGate device.
C. In the widget dashboard and there are one or more high-severity incidents for the FortiGate device.
D. In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device.
正解：D

質問 8：
Refer to the exhibit. You are assigned to implement a remote authentication server in the OT network. Which part of the hierarchy should the authentication server be part of?

A. Edge
B. Access
C. Cloud
D. Core
正解：A
解説: (Topexam メンバーにのみ表示されます)