Fortinet Exam NSE7_OTS-7.2 Topic 1 Question 13 Discussion

Actual exam question for Fortinet's NSE7_OTS-7.2 exam

Question #: 13
Topic #: 1

Refer to the exhibit.

PLC-3 and CLIENT can send traffic to PLC-1 and PLC-2. FGT-2 has only one software switch (SSW-1) connecting both PLC-3 and CLIENT. PLC-3 and CLIENT cannot send traffic to each other.

Which two statements about the traffic between PCL-1 and PLC-2 are true? (Choose two.)

AThe switch on FGT-2 must be hardware to implement micro-segmentation.

BMicro-segmentation on FGT-2 prevents direct device-to-device communication.

CTraffic must be inspected by FGT-EDGE in OT networks.

DFGT-2 controls intra-VLAN traffic through firewall policies.

Show Suggested Answer

Suggested Answer: B, D

by Cheryll at Jul 01, 2024, 02:06 AM

Limited Time Offer

25%

Off

Get Premium NSE7_OTS-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Keva

6 months ago

Haha, this exam is definitely keeping us on our toes! I'd go with B and D, but I'm also curious about C. Maybe the FGT-EDGE is like the bouncer at the OT party, making sure everyone behaves before they get to the firewall.

upvoted 0 times

Felicitas

5 months ago

Let's hope we both pass this exam with flying colors!

upvoted 0 times

...

Chan

5 months ago

Yeah, C is interesting. Maybe FGT-EDGE is the gatekeeper before traffic hits the firewall.

upvoted 0 times

...

Rosamond

5 months ago

I think you're right, B and D seem like the correct choices.

upvoted 0 times

...

Carri

5 months ago

I agree, this exam is no joke!

upvoted 0 times

...

Tequila

6 months ago

Shouldn't option C be true as well? I mean, in OT networks, the traffic should be inspected by the FGT-EDGE, right? Otherwise, how will the firewall policies on FGT-2 be effective?

upvoted 0 times

Tawanna

5 months ago

Micro-segmentation on FGT-2 prevents direct device-to-device communication, which is crucial for securing the network.

upvoted 0 times

...

Ira

5 months ago

FGT-2 controls intra-VLAN traffic through firewall policies, so option D is important for communication between PLC-1 and PLC-2.

upvoted 0 times

...

Barbra

5 months ago

Option C is not necessary for traffic between PLC-1 and PLC-2. It's about traffic inspection in OT networks.

upvoted 0 times

...

Blair

5 months ago

C) Traffic must be inspected by FGT-EDGE in OT networks.

upvoted 0 times

...

Karon

5 months ago

B) Micro-segmentation on FGT-2 prevents direct device-to-device communication.

upvoted 0 times

...

Sarah

5 months ago

A) The switch on FGT-2 must be hardware to implement micro-segmentation.

upvoted 0 times

...

Shonda

6 months ago

I agree with Brittni, B makes more sense in this scenario.

upvoted 0 times

...

Brittni

6 months ago

But micro-segmentation on FGT-2 prevents direct device-to-device communication, so it must be B.

upvoted 0 times

...

Francoise

6 months ago

I disagree, I believe the answer is D.

upvoted 0 times

...

Brittni

6 months ago

I think the answer is A.

upvoted 0 times

...

Chun

6 months ago

I'm not too sure about this one. A hardware switch on FGT-2 doesn't seem necessary for micro-segmentation, so I'd rule out A. But the other two options sound plausible to me.

upvoted 0 times

...

Britt

6 months ago

Hmm, I think the answer is B and D. Micro-segmentation on FGT-2 should prevent direct device-to-device communication, and the firewall policies on FGT-2 would control the intra-VLAN traffic.

upvoted 0 times