Fortinet
NSE7_OTS-7.2 · Question #30
Refer to the exhibit. In the topology shown in the exhibit, both PLCs can communicate directly with each other without going through the firewall. What can be done to improve the security in this…
The correct answer is D. Implement micro-segmentation. Micro-segmentation forces PLC‑to‑PLC traffic to traverse a security device (firewall/ISFW), so policies and inspection can be applied instead of allowing unrestricted Layer‑2 communication.
FortiGate OT Security
Question
Refer to the exhibit. In the topology shown in the exhibit, both PLCs can communicate directly with each other without going through the firewall. What can be done to improve the security in this situation?
Exhibit
Options
- AConfigure PLCs to use the IEEE802.1Q protocol to communicate with each other.
- BCreate firewall policies in the switch to secure traffic between PLCs.
- CImplement a solution that expands VLAN capabilities from Layer 2 to Layer 3.
- DImplement micro-segmentation.
How the community answered
(23 responses)- A17% (4)
- B4% (1)
- C4% (1)
- D74% (17)
Explanation
Micro-segmentation forces PLC‑to‑PLC traffic to traverse a security device (firewall/ISFW), so policies and inspection can be applied instead of allowing unrestricted Layer‑2 communication.
Topics
#micro-segmentation#PLC security#Layer 2 segmentation#OT network topology
Community Discussion
No community discussion yet for this question.