Fortinet NSE 7 - OT Security 7.2

Here you have the best Fortinet NSE7_OTS-7.2 practice exam questions

You have 40 total questions to study from
Each page has 5 questions, making a total of 8 pages
You can navigate through the pages using the buttons at the bottom
This questions were last updated on October 27, 2025
This site is not affiliated with or endorsed by Fortinet.

Question 1 of 40

Refer to the exhibit.
Exam NSE7_OTS-7.2: Question 1 - Image 1

The IPS profile is added on all of the security policies on FortiGate.
For an OT network, which statement of the IPS profile is true?

FortiGate has no IPS industrial signature database enabled.

The listed IPS signatures are classified as SCADA applications.

All IPS signatures are overridden and must block traffic match signature patterns.

The IPS profile inspects only traffic originating from SCADA equipment.

Correct Answer: B

Question 2 of 40

Which two statements are true when you deploy FortiGate as an offline IDS? (Choose two.)

Network traffic goes through FortiGate.

Network attacks can be detected and blocked.

FortiGate acts as network sensor.

FortiGate receives traffic from configured port mirroring.

Correct Answer: C, D

Question 3 of 40

Refer to the exhibit.
Exam NSE7_OTS-7.2: Question 3 - Image 1

A new operational technology rule is being created to monitor Modbus protocol traffic on FortiSIEM.
Which action will ensure all Modbus messages on the network match the rule?

Set the Aggregate attribute value to equal to or greater than zero.

Add a new condition to filter Modbus traffic based on the Source TCP/UDP port.

This rule is valid and requires no additional changes.

Remove attributes in the Group By section that are not configured in the Filter section.

Correct Answer: B

Question 4 of 40

As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect protocols from PLCs.
Which security sensor must you implement to detect protocols on the OT network?

Antivirusinspection

Intrusion prevention system (IPS)

Application control

Deep packet inspection (DPI)

Correct Answer: C

Question 5 of 40

You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM.
Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)

Risk

IPS

List

Security

Overview

Correct Answer: A, C, E