NSE7_OTS-7.2: Fortinet NSE 7 - OT Security 7.2 Fortigate Practice Questions
The free NSE7_OTS-7.2: Fortinet NSE 7 - OT Security 7.2 questions that deal with fortigate, with answers and explanations. The full bank and the timed practice test cover every topic the exam asks about.
Question #7
An OT network consists of multiple FortiGate devices. The edge FortiGate device is deployed as the secure gateway and is only allowing remote operators to access the ICS networks on site. Management hires a third-party company to conduct health and safety on site. The third- party company must have outbound access to external resources. As the OT network administrator, what is the best scenario to provide external access to the third-party company while continuing to secure the ICS networks?
Correct answer: C
Explanation
Splitting the edge FortiGate into VDOMs gives the third party its own logical firewall with separate policies and routing to the internet, keeping it isolated from the ICS networks.
Question #8
Which three criteria can a FortiGate device use to look for a matching firewall policy to process traffic? (Choose three.)
Select 3 answers.
Correct answer: A, D, E
Explanation
The three criteria that a FortiGate device can use to look for a matching firewall policy to process traffic are: * A. Services defined in the firewall policy - FortiGate devices can match firewall policies based on the services defined in the policy, such as HTTP, FTP, or DNS. * D. Destination defined as internet services in the firewall policy - FortiGate devices can also match firewall policies based on the destination of the traffic, including destination IP address, interface, or internet services. * E. Highest to lowest priority defined in the firewall policy - FortiGate devices can prioritize firewall policies based on the priority defined in the policy. The device will process traffic against the policy with the highest priority first and move down the list until it finds a matching policy. Reference: Fortinet NSE 7 - Enterprise Firewall 6.4 Study Guide, Chapter 4: Policy Implementation, page 4-18.
Continue with NSE7_OTS-7.2: Fortinet NSE 7 - OT Security 7.2
Unlock the full question bank
You have read the first 10 questions. A subscription opens every question in NSE7_OTS-7.2: Fortinet NSE 7 - OT Security 7.2, the full timed practice test, and your progress and weak-topic reporting.
Single exam
$19.99for 30 days
Full question bank and practice test for one exam, for 30 days.
Single exam
$49.99for 1 year
One exam for a full year. Nothing renews and nothing to cancel.
Full access
$39.99/mo
Every exam in the catalogue, month to month.
Full access
$199.99/yr
Every exam in the catalogue for a year.
Already subscribed? Sign in to pick up where you left off.
All NSE7_OTS-7.2: Fortinet NSE 7 - OT Security 7.2 practice questions →