Fortinet Exam NSE7_OTS-7.2 Topic 1 Question 6 Discussion

Actual exam question for Fortinet's NSE7_OTS-7.2 exam

Question #: 6
Topic #: 1

An OT architect has deployed a Layer 2 switch in the OT network at Level 1 the Purdue model-process control. The purpose of the Layer 2 switch is to segment traffic between PLC1 and PLC2 with two VLANs. All the traffic between PLC1 and PLC2 must first flow through the Layer 2 switch and then through the FortiGate device in the Level 2 supervisory control network.

What statement about the traffic between PLC1 and PLC2 is true?

AThe Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.

BThe Layer 2 switches routes any traffic to the FortiGate device through an Ethernet link.

CPLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.

DIn order to communicate, PLC1 must be in the same VLAN as PLC2.

Show Suggested Answer

Suggested Answer: C

The statement that is true about the traffic between PLC1 and PLC2 is that PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.

by Ruthann at Apr 13, 2024, 03:32 AM

Limited Time Offer

25%

Off

Get Premium NSE7_OTS-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lashawn

6 months ago

Actually, I think the correct answer is D) In order to communicate, PLC1 must be in the same VLAN as PLC2. It makes sense for the traffic to flow through the Layer 2 switch trunk link to the FortiGate device for security reasons.

upvoted 0 times

...

Mignon

6 months ago

I agree with Micheal, because if the traffic is segmented with two VLANs, then VLAN tags should be rewritten by the Layer 2 switch.

upvoted 0 times

...

Royal

6 months ago

I disagree, I believe the correct answer is C) PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.

upvoted 0 times

...

Micheal

7 months ago

I think the answer is A) The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.

upvoted 0 times

...

Moon

7 months ago

I think D) In order to communicate, PLC1 must be in the same VLAN as PLC2, is the correct statement based on network segmentation.

upvoted 0 times

...

Kimbery

7 months ago

I see your point, but I think B) The Layer 2 switch routes any traffic to the FortiGate device through an Ethernet link makes more sense.

upvoted 0 times

...

Cammy

7 months ago

I disagree, I believe the traffic must flow through the Layer-2 switch trunk link to the FortiGate device, so it should be C).

upvoted 0 times

...

Trevor

7 months ago

I think the correct statement is A) The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.

upvoted 0 times

...

Trinidad

8 months ago

I'm not sure I agree with option D. If PLC1 and PLC2 are in separate VLANs, they should still be able to communicate through the Layer 2 switch, right? I think the question is trying to throw us off with that one.

upvoted 0 times

...

Cecilia

8 months ago

That's a good point, Orville. I'm not entirely sure about the VLAN tag rewriting, but I think option C is the safest bet here. It's the only one that explicitly mentions the Layer 2 switch and the FortiGate device in the correct context.

upvoted 0 times

...

Orville

8 months ago

Interesting, I was initially leaning towards option A, but now I'm not so sure. Does the question mean that the Layer 2 switch is actually rewriting the VLAN tags before sending the traffic to the FortiGate?

upvoted 0 times

...

Emile

8 months ago

Haha, this is like one of those trick questions, isn't it? I'm going to have to really think this through. The way I see it, the Layer 2 switch is there to segment the traffic, but it has to get to the FortiGate somehow. Maybe option B is the way to go?

upvoted 0 times

Janessa

6 months ago

I disagree. I think option D is the correct statement.

upvoted 0 times

...

Maira

6 months ago

I think Aliza might be onto something. Option A does make sense.

upvoted 0 times

...

Gabriele

6 months ago

I'm not so sure about that. I believe option C is the correct one.

upvoted 0 times

...

Aliza

7 months ago

Hmm, let's see. I think option A sounds plausible.

upvoted 0 times

...

Vernice

8 months ago

I agree, and based on the information provided, I think the correct answer is C. The Layer-2 switch must have a trunk link to the FortiGate device in order to pass the traffic between the two VLANs.

upvoted 0 times

...

Staci

8 months ago

You know, I was thinking the same thing as Clorinda, but then I started second-guessing myself. What if the Layer 2 switch is actually doing some kind of VLAN tag rewriting before sending the traffic to the FortiGate? That seems like it could be a valid answer too.

upvoted 0 times

...

Jutta

8 months ago

Hmm, this question seems to be testing our understanding of the Purdue model and Layer 2 segmentation. The key here is that the traffic between PLC1 and PLC2 must flow through the Layer 2 switch before reaching the FortiGate device in the supervisory control network.

upvoted 0 times

...

Clorinda

8 months ago

I'm leaning towards option C. The question states that all traffic between PLC1 and PLC2 must flow through the Layer 2 switch before reaching the FortiGate device. So, the traffic would need to pass through a trunk link on the Layer 2 switch to get to the FortiGate.

upvoted 0 times

...

Irma

8 months ago

Hmm, I'm not sure about the VLAN aspect of this question. If the purpose of the Layer 2 switch is to segment the traffic, then it seems like PLC1 and PLC2 would need to be in separate VLANs. But I'm not sure if that means they can't communicate with each other directly.

upvoted 0 times

Crissy

7 months ago

A) The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.

upvoted 0 times

...

Clarence

7 months ago

That could be why they need to be in separate VLANs, to make sure they can't communicate directly.

upvoted 0 times

...

Alesia

8 months ago

D) In order to communicate, PLC1 must be in the same VLAN as PLC2.

upvoted 0 times

...

Rusty

8 months ago

So, they both have to go through the switch before reaching the FortiGate device.

upvoted 0 times

...

Luisa

8 months ago

C) PLC1 and PLC2 traffic must flow through the Layer-2 switch trunk link to the FortiGate device.

upvoted 0 times

...

Junita

8 months ago

Hmm, I think that makes sense because the purpose of the switch is to segment traffic.

upvoted 0 times

...

Lasandra

8 months ago

A) The Layer 2 switch rewrites VLAN tags before sending traffic to the FortiGate device.

upvoted 0 times

...

Jerry

8 months ago

This question seems straightforward, but I want to make sure I understand the scenario correctly. The Layer 2 switch is used to segment traffic between PLC1 and PLC2, and all traffic between them must go through the FortiGate device in the Level 2 supervisory control network. I think the key here is to determine how the traffic is handled by the Layer 2 switch before reaching the FortiGate device.

upvoted 0 times

...