nerdexam
Fortinet

NSE7_OTS-7.2 · Question #19

Refer to the exhibit. An OT architect has implemented a Modbus TCP with a simulation server Conpot to identify and control the Modus traffic in the OT network. The FortiGate-Edge device is…

The correct answer is A. The FortiGate-Edge device must be in NAT mode. B. NAT is disabled in the FortiGate firewall policy from port3 to ssw-01. See the full explanation below for the reasoning.

Question

Refer to the exhibit. An OT architect has implemented a Modbus TCP with a simulation server Conpot to identify and control the Modus traffic in the OT network. The FortiGate-Edge device is configured with a software switch interface ssw-01. Based on the topology shown in the exhibit, which two statements about the successful simulation of traffic between client and server are true? (Choose two.)

Exhibit

NSE7_OTS-7.2 question #19 exhibit

Options

  • AThe FortiGate-Edge device must be in NAT mode.
  • BNAT is disabled in the FortiGate firewall policy from port3 to ssw-01.
  • CThe FortiGate devices is in offline IDS mode.
  • DPort5 is not a member of the software switch.

How the community answered

(45 responses)
  • A
    84% (38)
  • C
    7% (3)
  • D
    9% (4)

Community Discussion

No community discussion yet for this question.

Full NSE7_OTS-7.2 Practice