NSE7_OTS-7.2 · Question #78
Refer to the exhibit, which shows a nonprotected ОТ environment. An administrator needs to implement appropriate protection on the ОТ network. Which three steps should an administrator take to…
The correct answer is A. Use segmentation. C. Deploy a FortiGate device within each ICS network. D. Configure firewall policies with industrial protocol sensors. Use segmentation: Network segmentation is critical in an OT environment to isolate different ICS (Industrial Control System) networks and protect sensitive systems. This limits the spread of threats and provides controlled access between segments. Deploy a FortiGate device…
Question
Refer to the exhibit, which shows a nonprotected ОТ environment. An administrator needs to implement appropriate protection on the ОТ network. Which three steps should an administrator take to protect the ОТ network? (Choose three.)
Exhibit
Options
- AUse segmentation.
- BConfigure firewall policies with web filtering to protect the different ICS networks.
- CDeploy a FortiGate device within each ICS network.
- DConfigure firewall policies with industrial protocol sensors.
- EDeploy an edge FortiGate between the internet and the ОТ network as a one-arm sniffer.
How the community answered
(35 responses)- A80% (28)
- B6% (2)
- E14% (5)
Explanation
Use segmentation: Network segmentation is critical in an OT environment to isolate different ICS (Industrial Control System) networks and protect sensitive systems. This limits the spread of threats and provides controlled access between segments. Deploy a FortiGate device within each ICS network: Deploying FortiGate devices in each ICS network ensures that localized security measures are in place to detect and prevent unauthorized access or threats. Configure firewall policies with industrial protocol sensors: Configuring policies with industrial protocol sensors helps monitor and protect OT-specific traffic (e.g., Modbus, DNP3). This enables the FortiGate to detect and respond to malicious activities targeting OT protocols.
Topics
Community Discussion
No community discussion yet for this question.
