New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Fortinet NSE7_OTS-7.2 Exam - Topic 1 Question 6 Discussion

Actual exam question for Fortinet's NSE7_OTS-7.2 exam
Question #: 6
Topic #: 1
[All NSE7_OTS-7.2 Questions]

An OT architect has deployed a Layer 2 switch in the OT network at Level 1 the Purdue model-process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs. All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.

What statement about the traffic between PLC1 and PLC2 is true?

Show Suggested Answer Hide Answer
Suggested Answer: C

The statement that is true about the traffic between PLC1 and PLC2 is that PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.


Contribute your Thoughts:

0/2000 characters
Sharee
3 months ago
C is definitely the right answer, traffic has to go through the trunk link!
upvoted 0 times
...
Marvel
3 months ago
B is misleading, switches don't route traffic, they just switch it.
upvoted 0 times
...
Makeda
3 months ago
Wait, are we sure about that? I thought VLANs could communicate directly.
upvoted 0 times
...
Brittni
4 months ago
Totally agree, option C makes the most sense here.
upvoted 0 times
...
Theresia
4 months ago
The Layer 2 switch just forwards traffic, it doesn't rewrite VLAN tags.
upvoted 0 times
...
Gertude
4 months ago
I feel like PLC1 and PLC2 can communicate across different VLANs if the switch is configured properly, so I'm skeptical about option D.
upvoted 0 times
...
Amber
4 months ago
I practiced a similar question where the traffic had to go through a trunk link, so I’m leaning towards option C being correct.
upvoted 0 times
...
Sarah
4 months ago
I think the Layer 2 switch just forwards traffic to the FortiGate, but I can't recall if it uses a trunk link for that.
upvoted 0 times
...
Alex
5 months ago
I remember that VLANs are used for traffic segmentation, but I'm not sure if the switch rewrites tags or just passes them through.
upvoted 0 times
...
Elke
5 months ago
Based on the information provided, I think the correct answer is C. The traffic between PLC1 and PLC2 must flow through the Layer 2 switch's trunk link to the FortiGate device. The question states that all the traffic has to go through the FortiGate, so the Layer 2 switch can't be routing it directly.
upvoted 0 times
...
Veronica
5 months ago
I'm a bit confused about the VLAN tagging. Does the Layer 2 switch rewrite the VLAN tags before sending the traffic to the FortiGate device? Or does the traffic have to flow through a trunk link? I'll need to re-read the question carefully.
upvoted 0 times
...
Muriel
5 months ago
Okay, let's think this through step-by-step. The Layer 2 switch is used to segment the traffic between PLC1 and PLC2 using VLANs. And all the traffic between them has to go through the FortiGate device in the supervisory control network. I think the key is figuring out how the VLAN tags are handled.
upvoted 0 times
...
Jennie
5 months ago
This question seems straightforward, but I want to make sure I understand the details about the VLAN segmentation and how the traffic flows between the devices.
upvoted 0 times
...
Eun
5 months ago
I'm feeling pretty good about this one. The question mentions the engineer creating a custom form, and the /flash/nsconfig/loginschema folder seems like the most logical place to upload that form on the Citrix ADC. I'll mark C as my answer.
upvoted 0 times
...
Katie
5 months ago
Hmm, I'm not too familiar with Prisma Cloud, so I'll have to think this through carefully. Let me re-read the question and options.
upvoted 0 times
...
Gail
5 months ago
Hmm, I'm not sure about changing the "User assignment required" setting. That could have unintended consequences. Maybe I should double-check the permissions first, as suggested in option C.
upvoted 0 times
...
Teri
5 months ago
Hmm, I'm not 100% sure about the specific terminology here. But I'll give it my best shot and try to reason through the key ideas.
upvoted 0 times
...
Lashawn
2 years ago
Actually, I think the correct answer is D) In order to communicate, PLC1 must be in the same VLAN as PLC2. It makes sense for the traffic to flow through the Layer 2 switch trunk link to the FortiGate device for security reasons.
upvoted 0 times
...
Mignon
2 years ago
I agree with Micheal, because if the traffic is segmented with two VLANs, then VLAN tags should be rewritten by the Layer 2 switch.
upvoted 0 times
...
Royal
2 years ago
I disagree, I believe the correct answer is C) PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.
upvoted 0 times
...
Micheal
2 years ago
I think the answer is A) The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.
upvoted 0 times
...
Moon
2 years ago
I think D) In order to communicate, PLC1 must be in the same VLAN as PLC2, is the correct statement based on network segmentation.
upvoted 0 times
...
Kimbery
2 years ago
I see your point, but I think B) The Layer 2 switch routes any traffic to the FortiGate device through an Ethernet link makes more sense.
upvoted 0 times
...
Cammy
2 years ago
I disagree, I believe the traffic must flow through the Layer-2 switch trunk link to the FortiGate device, so it should be C).
upvoted 0 times
...
Trevor
2 years ago
I think the correct statement is A) The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.
upvoted 0 times
...
Trinidad
2 years ago
I'm not sure I agree with option D. If PLC1 and PLC2 are in separate VLANs, they should still be able to communicate through the Layer 2 switch, right? I think the question is trying to throw us off with that one.
upvoted 0 times
...
Cecilia
2 years ago
That's a good point, Orville. I'm not entirely sure about the VLAN tag rewriting, but I think option C is the safest bet here. It's the only one that explicitly mentions the Layer 2 switch and the FortiGate device in the correct context.
upvoted 0 times
...
Orville
2 years ago
Interesting, I was initially leaning towards option A, but now I'm not so sure. Does the question mean that the Layer 2 switch is actually rewriting the VLAN tags before sending the traffic to the FortiGate?
upvoted 0 times
...
Emile
2 years ago
Haha, this is like one of those trick questions, isn't it? I'm going to have to really think this through. The way I see it, the Layer 2 switch is there to segment the traffic, but it has to get to the FortiGate somehow. Maybe option B is the way to go?
upvoted 0 times
Janessa
2 years ago
I disagree. I think option D is the correct statement.
upvoted 0 times
...
Maira
2 years ago
I think Aliza might be onto something. Option A does make sense.
upvoted 0 times
...
Gabriele
2 years ago
I'm not so sure about that. I believe option C is the correct one.
upvoted 0 times
...
Aliza
2 years ago
Hmm, let's see. I think option A sounds plausible.
upvoted 0 times
...
...
Vernice
2 years ago
I agree, and based on the information provided, I think the correct answer is C. The Layer-2 switch must have a trunk link to the FortiGate device in order to pass the traffic between the two VLANs.
upvoted 0 times
...
Staci
2 years ago
You know, I was thinking the same thing as Clorinda, but then I started second-guessing myself. What if the Layer 2 switch is actually doing some kind of VLAN tag rewriting before sending the traffic to the FortiGate? That seems like it could be a valid answer too.
upvoted 0 times
...
Jutta
2 years ago
Hmm, this question seems to be testing our understanding of the Purdue model and Layer 2 segmentation. The key here is that the traffic between PLC1 and PLC2 must flow through the Layer 2 switch before reaching the FortiGate device in the supervisory control network.
upvoted 0 times
...
Clorinda
2 years ago
I'm leaning towards option C. The question states that all traffic between PLC1 and PLC2 must flow through the Layer 2 switch before reaching the FortiGate device. So, the traffic would need to pass through a trunk link on the Layer 2 switch to get to the FortiGate.
upvoted 0 times
...
Irma
2 years ago
Hmm, I'm not sure about the VLAN aspect of this question. If the purpose of the Layer 2 switch is to segment the traffic, then it seems like PLC1 and PLC2 would need to be in separate VLANs. But I'm not sure if that means they can't communicate with each other directly.
upvoted 0 times
Crissy
2 years ago
A) The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.
upvoted 0 times
...
Clarence
2 years ago
That could be why they need to be in separate VLANs, to make sure they can't communicate directly.
upvoted 0 times
...
Alesia
2 years ago
D) In order to communicate, PLC1 must be in the same VLAN as PLC2.
upvoted 0 times
...
Rusty
2 years ago
So, they both have to go through the switch before reaching the FortiGate device.
upvoted 0 times
...
Luisa
2 years ago
C) PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.
upvoted 0 times
...
Junita
2 years ago
Hmm, I think that makes sense because the purpose of the switch is to segment traffic.
upvoted 0 times
...
Lasandra
2 years ago
A) The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.
upvoted 0 times
...
...
Jerry
2 years ago
This question seems straightforward, but I want to make sure I understand the scenario correctly. The Layer 2 switch is used to segment traffic between PLC1 and PLC2, and all traffic between them must go through the FortiGate device in the Level 2 supervisory control network. I think the key here is to determine how the traffic is handled by the Layer 2 switch before reaching the FortiGate device.
upvoted 0 times
...

Save Cancel