Fortinet Exam NSE7_OTS-7.2 Topic 1 Question 6 Discussion

Actual exam question for Fortinet's NSE7_OTS-7.2 exam

Question #: 6
Topic #: 1

An OT architect has deployed a Layer 2 switch in the OT network at Level 1 the Purdue model-process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs. All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.

What statement about the traffic between PLC1 and PLC2 is true?

AThe Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.

BThe Layer 2 switches routes any traffic to the FortiGate device through an Ethernet link.

CPLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.

DIn order to communicate, PLC1 must be in the same VLAN as PLC2.

Show Suggested Answer

Suggested Answer: C

The statement that is true about the traffic between PLC1 and PLC2 is that PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.

by Ruthann at Apr 13, 2024, 03:32 AM

Limited Time Offer

25%

Off

Get Premium NSE7_OTS-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Trinidad

5 days ago

I'm not sure I agree with option D. If PLC1 and PLC2 are in separate VLANs, they should still be able to communicate through the Layer 2 switch, right? I think the question is trying to throw us off with that one.

upvoted 0 times

...

Cecilia

5 days ago

That's a good point, Orville. I'm not entirely sure about the VLAN tag rewriting, but I think option C is the safest bet here. It's the only one that explicitly mentions the Layer 2 switch and the FortiGate device in the correct context.

upvoted 0 times

...

Orville

6 days ago

Interesting, I was initially leaning towards option A, but now I'm not so sure. Does the question mean that the Layer 2 switch is actually rewriting the VLAN tags before sending the traffic to the FortiGate?

upvoted 0 times

...

Emile

7 days ago

Haha, this is like one of those trick questions, isn't it? I'm going to have to really think this through. The way I see it, the Layer 2 switch is there to segment the traffic, but it has to get to the FortiGate somehow. Maybe option B is the way to go?

upvoted 0 times

...

Vernice

7 days ago

I agree, and based on the information provided, I think the correct answer is C. The Layer-2 switch must have a trunk link to the FortiGate device in order to pass the traffic between the two VLANs.

upvoted 0 times

...

Staci

8 days ago

You know, I was thinking the same thing as Clorinda, but then I started second-guessing myself. What if the Layer 2 switch is actually doing some kind of VLAN tag rewriting before sending the traffic to the FortiGate? That seems like it could be a valid answer too.

upvoted 0 times

...

Jutta

8 days ago

Hmm, this question seems to be testing our understanding of the Purdue model and Layer 2 segmentation. The key here is that the traffic between PLC1 and PLC2 must flow through the Layer 2 switch before reaching the FortiGate device in the supervisory control network.

upvoted 0 times

...

Clorinda

9 days ago

I'm leaning towards option C. The question states that all traffic between PLC1 and PLC2 must flow through the Layer 2 switch before reaching the FortiGate device. So, the traffic would need to pass through a trunk link on the Layer 2 switch to get to the FortiGate.

upvoted 0 times

...

Irma

11 days ago

Hmm, I'm not sure about the VLAN aspect of this question. If the purpose of the Layer 2 switch is to segment the traffic, then it seems like PLC1 and PLC2 would need to be in separate VLANs. But I'm not sure if that means they can't communicate with each other directly.

upvoted 0 times

...

Jerry

13 days ago

This question seems straightforward, but I want to make sure I understand the scenario correctly. The Layer 2 switch is used to segment traffic between PLC1 and PLC2, and all traffic between them must go through the FortiGate device in the Level 2 supervisory control network. I think the key here is to determine how the traffic is handled by the Layer 2 switch before reaching the FortiGate device.

upvoted 0 times

...