[Feb 10, 2026] NSE7_OTS-7.2 Test Engine files, NSE7_OTS-7.2 Dumps PDF
Latest Fortinet NSE7_OTS-7.2 PDF and Dumps (2026) Free Exam Questions Answers
NEW QUESTION # 25
Refer to the exhibit.
You are navigating through FortiSIEM in an OT network.
How do you view information presented in the exhibit and what does the FortiGate device security status tell you?
- A. In the PCI logging dashboard and there are one or more high-severity security incidents for the FortiGate device.
- B. In the business service dashboard and there are one or more high-severity security incidents for the FortiGate device.
- C. In the widget dashboard and there are one or more high-severity incidents for the FortiGate device.
- D. In the summary dashboard and there are one or more high-severity security incidents for the FortiGate device.
Answer: D
NEW QUESTION # 26
As an OT administrator, it is important to understand how industrial protocols work in an OT network.
Which communication method is used by the Modbus protocol?
- A. It uses OSI Layer 2 and both the primary/secondary devices send data based on a matching token ring.
- B. It uses OSI Layer 2 and the secondary device sends data based on request from primary device.
- C. It uses OSI Layer 2 and the primary device sends data based on request from secondary device.
- D. It uses OSI Layer 2 and both the primary/secondary devices always send data during the communication.
Answer: B
NEW QUESTION # 27
Refer to the exhibits.
Which statement about some of the generated report elements from FortiAnalyzer is true?
- A. This report is predefined and is not available for customization.
- B. The file types confirm the infected applications on the PLCs.
- C. FortiGate collects the logs and generates the report to FortiAnalyzer.
- D. The report confirms Modbus and IEC 104 are the key applications crossing the network.
Answer: D
NEW QUESTION # 28
Refer to the exhibit.
Given the configurations on the FortiGate, which statement is true?
- A. FortiGate is configured with forward-domains to forward only company domain website traffic.
- B. FortiGate is configured with forward-domains to forward only domain controller traffic.
- C. FortiGate is configured with forward-domains to reduce unnecessary traffic.
- D. FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.
Answer: C
NEW QUESTION # 29
Refer to the exhibit.
PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT can send traffic to each other at the Layer 2 level.
What must the OT admin do to prevent Layer 2-level communication between PLC-3 and CLIENT?
- A. Set a unique forward domain for each interface of the software switch.
- B. Create a VLAN for each device and replace the current FGT-2 software switch members.
- C. Implement policy routes on FGT-2 to control traffic between devices.
- D. Enable explicit intra-switch policy to require firewall policies on FGT-2.
Answer: A,B
NEW QUESTION # 30
An OT supervisor has configured LDAP and FSSO for the authentication. The goal is that all the users be authenticated against passive authentication first and, if passive authentication is not successful, then users should be challenged with active authentication. What should the OT supervisor do to achieve this on FortiGate?
- A. Under config user settings configure set auth-on-demand implicit.
- B. Enable two-factor authentication with FSSO.
- C. Configure a firewall policy with LDAP users and place it on the top of list of firewall policies.
- D. Configure a firewall policy with FSSO users and place it on the top of list of firewall policies.
Answer: D
Explanation:
The OT supervisor should configure a firewall policy with FSSO users and place it on the top of list of firewall policies in order to achieve the goal of authenticating users against passive authentication first and, if passive authentication is not successful, then challenging them with active authentication.
NEW QUESTION # 31
Refer to the exhibit.
In order for a FortiGate device to act as router on a stick, what configuration must an OT network architect implement on FortiGate to achieve inter-VLAN routing?
- A. Set FortiGate to operate in transparent mode.
- B. Set a software switch on FortiGate to handle inter-VLAN traffic.
- C. Set a FortiGate interface with the switch to operate as an 802.1 q trunk.
- D. Set a unique forward domain on each interface on the network.
Answer: C
NEW QUESTION # 32
An OT network administrator is trying to implement active authentication.
Which two methods should the administrator use to achieve this? (Choose two.)
- A. Local authentication on FortiGate
- B. FSSO authentication on FortiGate
- C. Role-based authentication on FortiNAC
- D. Two-factor authentication on FortiAuthenticator
Answer: A,D
NEW QUESTION # 33
Refer to the exhibit.
Given the configurations on the FortiGate, which statement is true?
- A. FortiGate is configured with forward-domains to forward only company domain website traffic.
- B. FortiGate is configured with forward-domains to forward only domain controller traffic.
- C. FortiGate is configured with forward-domains to reduce unnecessary traffic.
- D. FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.
Answer: C
NEW QUESTION # 34
As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect exploits that affect PLCs. Which security sensor must implement to detect these types of industrial exploits?
- A. Intrusion prevention system (IPS)
- B. Application control
- C. Antivirus inspection
- D. Deep packet inspection (DPI)
Answer: D
NEW QUESTION # 35
An OT network architect needs to secure control area zones with a single network access policy to provision devices to any number of different networks.
On which device can this be accomplished?
- A. FortiEDR
- B. FortiGate
- C. FortiSwitch
- D. FortiNAC
Answer: D
NEW QUESTION # 36
Refer to the exhibit.
Which statement about the interfaces shown in the exhibit is true?
- A. port1, port1-vlan10, and port1-vlan1 are in different broadcast domains
- B. port2, port2-vlan10, and port2-vlan1 are part of the software switch interface.
- C. port1-vlan10 and port2-vlan10 are part of the same broadcast domain
- D. The VLAN ID of port1-vlan1 can be changed to the VLAN ID 10.
Answer: A
NEW QUESTION # 37
How can you achieve remote access and internel availability in an OT network?
- A. Create more access policies to prevent unauthorized access.
- B. Create a back-end backup network as a redundancy measure.
- C. Add additional internal firewalls to access OT devices.
- D. Implement SD-WAN to manage traffic on each ISP link.
Answer: D
NEW QUESTION # 38
Refer to the exhibit. PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT cannot send traffic to each other. Which two statements about the traffic between PCL-1 and PLC-2 are true? (Choose two.)
- A. FGT-2 controls intra-VLAN traffic through firewall policies.
- B. The switch on FGT-2 must be hardware to implement micro-segmentation.
- C. Traffic must be inspected by FGT-EDGE in OT networks.
- D. Micro-segmentation on FGT-2 prevents direct device-to-device communication.
Answer: A,D
NEW QUESTION # 39
Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic?
(Choose three.)
- A. Services defined in the firewall policy.
- B. Lowest to highest policy ID number
- C. Source defined as internet services in the firewall policy
- D. Destination defined as internet services in the firewall policy
- E. Highest to lowest priority defined in the firewall policy
Answer: A,D,E
Explanation:
Explanation
The three criteria that a FortiGate device can use to look for a matching firewall policy to process traffic are:
A: Services defined in the firewall policy - FortiGate devices can match firewall policies based on the services defined in the policy, such as HTTP, FTP, or DNS.
D: Destination defined as internet services in the firewall policy - FortiGate devices can also match firewall policies based on the destination of the traffic, including destination IP address, interface, or internet services.
E: Highest to lowest priority defined in the firewall policy - FortiGate devices can prioritize firewall policies based on the priority defined in the policy. The device will process traffic against the policy with the highest priority first and move down the list until it finds a matching policy.
NEW QUESTION # 40
......
Pass Your NSE 7 Network Security Architect NSE7_OTS-7.2 Exam on Feb 10, 2026 with 73 Questions: https://www.passsureexam.com/NSE7_OTS-7.2-pass4sure-exam-dumps.html
NSE7_OTS-7.2 Free Exam Study Guide! (Updated 73 Questions): https://drive.google.com/open?id=1E7Q1xTat-E7rsCmYb4DtYaDq4uo_rwrV