Fortinet Exam NSE7_OTS-7.2 Topic 2 Question 24 Discussion

Actual exam question for Fortinet's NSE7_OTS-7.2 exam

Question #: 24
Topic #: 2

Refer to the exhibit.

Based on the topology designed by the OT architect, which two statements about implementing OT security are true? (Choose two.)

AFirewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.

BMicro-segmentation can be achieved only by replacing FortiGate-3 and FortiGate-4 with a pair of FortiSwitch devices.

CIT and OT networks are separated by segmentation.

DFortiGate-3 and FortiGate-4 devices must be in a transparent mode.

Show Suggested Answer

Suggested Answer: D

by Wilson at Oct 20, 2024, 09:35 AM

Limited Time Offer

25%

Off

Get Premium NSE7_OTS-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Walker

29 days ago

I just hope the exam doesn't have any questions about 'Who let the dogs out?' - that would really throw me off!

upvoted 0 times

Justine

7 days ago

User 3: I agree. It's crucial to segment the network to prevent lateral movement of threats.

upvoted 0 times

...

Brittani

8 days ago

User 2: That's correct. Another important step is to implement a firewall at the connection between the corporate network and the OT network.

upvoted 0 times

...

Cammy

12 days ago

User 1: The first step is to implement a firewall at the Internet connection.

upvoted 0 times

...

Hana

1 months ago

B is a bit strange. Why would we need to replace the FortiGate devices with switches to achieve micro-segmentation? That doesn't seem right.

upvoted 0 times

Tu

1 days ago

B: Maybe the architect had a specific reason for that decision.

upvoted 0 times

...

Raul

5 days ago

A: I agree, replacing FortiGate devices with switches for micro-segmentation doesn't make sense.

upvoted 0 times

...

Roslyn

1 months ago

D is definitely wrong. The FortiGate devices are not in transparent mode, they are actively routing traffic between the networks.

upvoted 0 times

Wai

23 days ago

A: So, D is definitely wrong then, since the devices are actively routing traffic.

upvoted 0 times

...

Hollis

24 days ago

B: I agree, option B is also true because the FortiGate devices are not in transparent mode.

upvoted 0 times

...

Glenna

1 months ago

A: I think option A is correct because the FortiGate devices are routing traffic between the networks.

upvoted 0 times

...

Christa

2 months ago

I think A and C are both true. The firewalls should have industrial protocol sensors, and the networks are indeed separated by segmentation.

upvoted 0 times

Annamaria

11 days ago

That's right, A and C are the right choices for implementing OT security.

upvoted 0 times

...

Dierdre

16 days ago

Yes, the firewalls need to have industrial protocol sensors and the networks are separated.

upvoted 0 times

...

Gayla

1 months ago

I agree, A and C are the correct options.

upvoted 0 times

...

Peggy

2 months ago

C seems like the correct answer. The topology clearly separates the IT and OT networks, so micro-segmentation is not needed to achieve that.

upvoted 0 times

Haydee

1 months ago

C) IT and OT networks are separated by segmentation.

upvoted 0 times

...

Leoma

1 months ago

Yes, C is the right choice. The segmentation between IT and OT networks is already in place.

upvoted 0 times

...

Marge

1 months ago

A) Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors.

upvoted 0 times

...

Leoma

2 months ago

I agree, C is the correct answer. The IT and OT networks are clearly separated in the diagram.

upvoted 0 times

...

Doyle

2 months ago

I believe A) Firewall policies should be configured on FortiGate-3 and FortiGate-4 with industrial protocol sensors is also a valid option.

upvoted 0 times

...

Karrie

3 months ago

I agree with Peggie, that makes sense for implementing OT security.

upvoted 0 times

...

Peggie

3 months ago

I think the answer is C) IT and OT networks are separated by segmentation.

upvoted 0 times

...