Fortinet Discussions

Exam NSE7_OTS-6.4 All Questions

View all questions & answers for the NSE7_OTS-6.4 exam

Go to Exam

Exam NSE7_OTS-6.4 topic 1 question 34 discussion

Actual exam question from Fortinet's NSE7_OTS-6.4

Question #: 34
Topic #: 1

[All NSE7_OTS-6.4 Questions]

Refer to the exhibit.

An OT architect has implemented a Modbus TCP with a simulation server Conpot to identify and control the Modus traffic in the OT network. The FortiGate-Edge device is configured with a software switch interface ssw-01.
Based on the topology shown in the exhibit, which two statements about the successful simulation of traffic between client and server are true? (Choose two.)

A. The FortiGate-Edge device must be in NAT mode.
B. NAT is disabled in the FortiGate firewall policy from port3 to ssw-01.
C. The FortiGate devices is in offline IDS mode.
D. Port5 is not a member of the software switch.

Show Suggested Answer

Suggested Answer: AC 🗳️

by 303User at Dec. 17, 2022, 8:45 p.m.

Comments

Submit Cancel

jackbauer007

1 year, 1 month ago

correct: AB

upvoted 1 times

...

Spippolo

1 year, 10 months ago

Selected Answer: AB

AB by exclusion. D --> False (pag. 176 - Study Guide) C --> False (offline IDS mode is with "Port mirroring")

upvoted 1 times

...

cciesam

1 year, 11 months ago

Selected Answer: AB

AB should be correct. Fortigate cannot be on offline.

upvoted 1 times

...

303User

2 years, 1 month ago

This is correct - conpot is a honeypot therefore IDS should be off.

upvoted 1 times

...