New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet NSE7_OTS-7.2 Exam - Topic 1 Question 42 Discussion

Actual exam question for Fortinet's NSE7_OTS-7.2 exam
Question #: 42
Topic #: 1
[All NSE7_OTS-7.2 Questions]

Refer to the exhibit.

You are creating a new operational technology (OT) rule to monitor Modbus protocol traffic on FortiSIEM

Which action must you take to ensure that all Modbus messages on the network match the rule?

Show Suggested Answer Hide Answer
Suggested Answer: A

Contribute your Thoughts:

0/2000 characters
Rima
3 days ago
A) Add a new condition to filter Modbus traffic based on the source TCP/UDP port. Easy peasy!
upvoted 0 times
...
Francine
8 days ago
Hmm, I'm not sure about this one. Modbus traffic can be tricky to monitor.
upvoted 0 times
...
Vannessa
13 days ago
D) In the Group By section remove all attributes that are not configured in the Filter section. Seems like the logical choice to me.
upvoted 0 times
...
Peter
18 days ago
B) The condition on the SubPattern filter must use the AND logical operator. This is the correct answer to ensure all Modbus messages match the rule.
upvoted 0 times
...
Annamae
23 days ago
Removing attributes in the Group By section sounds familiar, but I’m not confident if it’s necessary for monitoring Modbus traffic specifically.
upvoted 0 times
...
Anna
28 days ago
I feel like the Aggregate section is crucial, but I don't quite understand how setting the attribute value affects the rule.
upvoted 0 times
...
Kenneth
1 month ago
I think we practiced a similar question where we had to decide on logical operators, but I can't recall if AND was the right choice for this scenario.
upvoted 0 times
...
Renato
1 month ago
I remember we discussed the importance of filtering traffic by source ports, but I'm not sure if that's the best approach here.
upvoted 0 times
...
Taryn
1 month ago
I feel pretty confident about this one. I think option B is the right answer - using the AND operator in the SubPattern filter is crucial to ensure all Modbus messages match the rule.
upvoted 0 times
...
Yun
2 months ago
Okay, for this type of question, I usually try to think through the key steps required to set up the rule properly. I'd focus on getting the filter conditions right first, then worry about the other settings.
upvoted 0 times
...
Alease
2 months ago
Hmm, I'm a bit confused on the difference between the AND operator and the Aggregate section. I'll need to double-check the details on those to make sure I understand how to apply them correctly.
upvoted 0 times
...
Timothy
2 months ago
I'm not totally sure about this one, but I think I'd start by trying option A to filter the Modbus traffic. That seems like the most straightforward approach.
upvoted 0 times
...

Save Cancel