Fortinet Exam NSE7_OTS-7.2 Topic 2 Question 17 Discussion

Actual exam question for Fortinet's NSE7_OTS-7.2 exam

Question #: 17
Topic #: 2

With the limit of using one firewall device, the administrator enables multi-VDOM on FortiGate to provide independent multiple security domains to each ICS network. Which statement ensures security protection is in place for all ICS networks?

AEach traffic VDOM must have a direct connection to FortiGuard services to receive the required security updates.

BThe management VDOM must have access to all global security services.

CEach VDOM must have an independent security license.

DTraffic between VDOMs must pass through the physical interfaces of FortiGate to check for security incidents.

Show Suggested Answer

Suggested Answer: D

by Meaghan at Aug 24, 2024, 03:08 AM

Limited Time Offer

25%

Off

Get Premium NSE7_OTS-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Wade

2 months ago

I bet the exam writer was sitting back, sipping their coffee, thinking 'Let's see if they can figure out the right combination of VDOMs and security features.'

upvoted 0 times

Tora

1 months ago

D) Traffic between VDOMs must pass through the physical interfaces of FortiGate to check for security incidents.

upvoted 0 times

...

Clorinda

1 months ago

C) Each VDOM must have an independent security license.

upvoted 0 times

...

Sage

1 months ago

B) The management VDOM must have access to all global security services.

upvoted 0 times

...

Amber

2 months ago

A) Each traffic VDOM must have a direct connection to FortiGuard services to receive the required security updates.

upvoted 0 times

...

Cornell

3 months ago

I think the answer is B, because the management VDOM should have access to all global security services.

upvoted 0 times

...

Doretha

3 months ago

Haha, imagine if the firewall admin forgot to pay the bill for the FortiGuard services. The ICS networks would be left high and dry!

upvoted 0 times

...

Naomi

3 months ago

D seems like the right choice to me. Forcing the traffic between VDOMs to go through the physical interfaces is crucial for security inspection and incident detection.

upvoted 0 times

Leota

2 months ago

Having that extra layer of security by checking traffic between VDOMs through physical interfaces is a smart choice.

upvoted 0 times

...

Clay

2 months ago

It's important to ensure that security incidents are checked for as traffic moves between VDOMs.

upvoted 0 times

...

Sarah

2 months ago

I agree, having traffic between VDOMs pass through physical interfaces is essential for security.

upvoted 0 times

...

Madalyn

3 months ago

But having independent security licenses for each VDOM seems more secure.

upvoted 0 times

...

Claudia

3 months ago

I disagree, I believe the answer is D.

upvoted 0 times

...

Madalyn

3 months ago

I think the answer is C.

upvoted 0 times

...

Andra

3 months ago

I'm going with option C. Each VDOM should have its own independent security license to maintain the isolation and security of the different ICS networks.

upvoted 0 times

Leatha

2 months ago

Definitely, option C ensures that each ICS network is properly protected with its own security license.

upvoted 0 times

...

Keneth

2 months ago

It's important to make sure each VDOM has its own security license to prevent any security breaches.

upvoted 0 times

...

Alyce

2 months ago

I agree, having independent security licenses for each VDOM is crucial for maintaining security isolation.

upvoted 0 times

...

Tess

2 months ago

Option C is the best choice. Each VDOM having its own security license ensures proper security for each ICS network.

upvoted 0 times

...

Chandra

3 months ago

I think option B is the correct answer. The management VDOM needs access to all global security services to ensure the security updates are properly distributed to all VDOMs.

upvoted 0 times

Gerald

2 months ago

But what about option D? Don't you think traffic between VDOMs should pass through the physical interfaces for security checks?

upvoted 0 times

...

Myong

3 months ago

I agree, option B makes sense. The management VDOM should have access to all global security services.

upvoted 0 times

...