Free NSE7_OTS-7.2 Exam Braindumps
Fortinet NSE 7 - OT Security 7.2 Questions 21–25 (page: 6)

Updated On: 10-Feb-2026

An OT administrator has configured FSSO and local firewall authentication. A user who is part of a user group is not prompted from credentials during authentication.
What is a possible reason?

  1. FortiGate determined the user by passive authentication
  2. The user was determined by Security Fabric
  3. Two-factor authentication is not configured with RADIUS authentication method
  4. FortiNAC determined the user by DHCP fingerprint method

Answer(s): A



Refer to the exhibit.



Given the configurations on the FortiGate, which statement is true?

  1. FortiGate is configured with forward-domains to reduce unnecessary traffic.
  2. FortiGate is configured with forward-domains to forward only domain controller traffic.
  3. FortiGate is configured with forward-domains to forward only company domain website traffic.
  4. FortiGate is configured with forward-domains to filter and drop non-domain controller traffic.

Answer(s): A



An administrator wants to use FortiSoC and SOAR features on a FortiAnalyzer device to detect and block any unauthorized access to FortiGate devices in an OT network.
Which two statements about FortiSoC and SOAR features on FortiAnalyzer are true? (Choose two.)

  1. You must set correct operator in event handler to trigger an event.
  2. You can automate SOC tasks through playbooks.
  3. Each playbook can include multiple triggers.
  4. You cannot use Windows and Linux hosts security events with FortiSoC.

Answer(s): A,B


Reference:

https://docs.fortinet.com/document/fortianalyzer/7.0.0/administration-guide/268882/fortisoc



You are investigating a series of incidents that occurred in the OT network over past 24 hours in FortiSIEM.
Which three FortiSIEM options can you use to investigate these incidents? (Choose three.)

  1. Security
  2. IPS
  3. List
  4. Risk
  5. Overview

Answer(s): C,D,E



Refer to the exhibit.



Which statement about the interfaces shown in the exhibit is true?

  1. port2, port2-vlan10, and port2-vlan1 are part of the software switch interface.
  2. The VLAN ID of port1-vlan1 can be changed to the VLAN ID 10.
  3. port1-vlan10 and port2-vlan10 are part of the same broadcast domain
  4. port1, port1-vlan10, and port1-vlan1 are in different broadcast domains

Answer(s): D



Viewing page 6 of 14
Viewing questions 26 - 30 out of 69 questions


Post your Comments and Discuss Fortinet NSE7_OTS-7.2 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!