Fortinet NSE7_OTS-7.2 Exam - Topic 1 Question 34 Discussion

Actual exam question for Fortinet's NSE7_OTS-7.2 exam

Question #: 34
Topic #: 1

[All NSE7_OTS-7.2 Questions]

[Fortinet Products for OT Security]

Refer to the exhibit.

The IPS profile is added on all of the security policies on FortiGate.

For an OT network, which statement of the IPS profile is true?

AFortiGate has no IPS industrial signature database enabled.

BThe listed IPS signatures are classified as SCADA equipment.

CAll IPS signatures are overridden and must block traffic match signature patterns.

DThe IPS profile inspects only traffic originating from SCADA equipment.

Show Suggested Answer

Suggested Answer: B

by Flo at Jun 14, 2025, 05:01 AM

Limited Time Offer

25%

Off

Get Premium NSE7_OTS-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sharen

2 months ago

C seems too extreme, not all signatures should block traffic.

upvoted 0 times

...

Kasandra

2 months ago

Not sure about that, I feel like D makes more sense.

upvoted 0 times

...

Frederick

2 months ago

I think option B is correct, SCADA signatures are crucial.

upvoted 0 times

...

Kelvin

3 months ago

A is definitely wrong, FortiGate has an IPS database.

upvoted 0 times

...

Sharmaine

3 months ago

Surprised to see people doubting the importance of IPS in OT!

upvoted 0 times

...

Margurite

3 months ago

I’m leaning towards option A since I remember something about the IPS database needing to be enabled for it to work properly, but I could be mixing it up with another topic.

upvoted 0 times

...

Lino

3 months ago

I feel like we practiced a question similar to this, and I think the IPS profile does inspect traffic from SCADA, but I’m not completely confident.

upvoted 0 times

...

In

4 months ago

I think option B sounds familiar because we discussed SCADA signatures in class, but I can't recall if they are all classified that way.

upvoted 0 times

...

Malika

4 months ago

I remember studying that FortiGate has specific IPS signatures for industrial control systems, but I'm not sure if they all apply to SCADA equipment.

upvoted 0 times

...

Zack

4 months ago

I've got a strategy - I'll eliminate the options that don't seem quite right, then choose the best remaining answer.

upvoted 0 times

...

Yuriko

4 months ago

I'm a bit confused by the options. I'll need to carefully read through each one to determine the correct answer.

upvoted 0 times

...

Edmond

4 months ago

Okay, let me think this through. I need to focus on the key details about the IPS profile for OT networks.

upvoted 0 times

...

Johnna

4 months ago

Hmm, I'm not sure about this one. The IPS profile for an OT network is a bit tricky.

upvoted 0 times

...

Derrick

5 months ago

This question seems pretty straightforward. I think I can handle it.

upvoted 0 times

...

Reyes

7 months ago

Personally, I'm just hoping there's no option E: 'The IPS profile is a sentient being that decides traffic based on the alignment of the stars.'

upvoted 0 times

Leslie

5 months ago

C) All IPS signatures are overridden and must block traffic match signature patterns.

upvoted 0 times

...

Heike

5 months ago

B) The listed IPS signatures are classified as SCADA equipment.

upvoted 0 times

...

Willodean

7 months ago

A) FortiGate has no IPS industrial signature database enabled.

upvoted 0 times

...

Shenika

7 months ago

Haha, I bet the guy who wrote option C has never actually worked in an OT environment! That would bring the whole plant to a screeching halt.

upvoted 0 times

...

Jaleesa

7 months ago

C is just too extreme. Overriding all signatures and blocking everything is not practical for an OT network. B makes the most sense to me.

upvoted 0 times

Leana

5 months ago

Yeah, C does seem a bit extreme. B makes more sense in this scenario.

upvoted 0 times

...

Annamaria

6 months ago

I agree, B seems like the most reasonable option for an OT network.

upvoted 0 times

...

Tamra

6 months ago

Yeah, C does seem a bit extreme. B makes more sense for sure.

upvoted 0 times

...

Katina

7 months ago

I agree, B seems like the most reasonable option for an OT network.

upvoted 0 times

...

Tyisha

7 months ago

D doesn't seem right - the IPS profile should inspect all traffic, not just from SCADA equipment. I'm leaning towards B as well.

upvoted 0 times

Maia

7 months ago

Yeah, I think B is the right choice. The IPS profile should cover all traffic, not just from SCADA equipment.

upvoted 0 times

...

Lisbeth

7 months ago

I agree, D doesn't make sense. B seems like the correct option.

upvoted 0 times

...

Caitlin

8 months ago

Hmm, that makes sense too. It's important to understand the scope of the IPS profile for OT security.

upvoted 0 times

...

Ben

8 months ago

I disagree, I believe the answer is D. The IPS profile inspects only traffic originating from SCADA equipment.

upvoted 0 times

...

Caitlin

8 months ago

I think the answer is B. The listed IPS signatures are classified as SCADA equipment.

upvoted 0 times

...

Reita

8 months ago

I think option B is the correct answer. The IPS profile should have signatures specific to SCADA equipment and industrial control systems for an OT network.

upvoted 0 times