NSE 7 – OT Security 7.2 — Question 1

As an OT network administrator, you are managing three FortiGate devices that each protect different levels on the Purdue model. To increase traffic visibility, you are required to implement additional security measures to detect protocols from PLCs.
Which security sensor must you implement to detect protocols on the OT network?

Answer options

• A. Antivirusinspection
• B. Intrusion prevention system (IPS)
• C. Application control
• D. Deep packet inspection (DPI)

Correct answer: C

Explanation

The correct answer is C, Application control, as it specifically focuses on identifying and managing applications and protocols, including those used by PLCs. Options A and B do not provide the necessary visibility into application-level traffic, while D, Deep packet inspection, is more general and may not be optimized for the specific application protocols used in OT environments.