NSE4 · Question #131
How can DLP file filters be configured to detect Office 2010 files? (Select all that apply.)
The correct answer is B. File TypE. Archive(zip) E. File NamE. "*.pptx", "*.docx", "*.xlsx". DLP file filters can detect Office 2010 files by matching their modern Open XML extensions or by recognizing their underlying ZIP archive structure.
Question
How can DLP file filters be configured to detect Office 2010 files? (Select all that apply.)
Options
- AFile TypE. Microsoft Office(msoffice)
- BFile TypE. Archive(zip)
- CFile TypE. Unknown Filetype(unknown)
- DFile NamE. ".ppt", ".doc", "*.xls"
- EFile NamE. ".pptx", ".docx", "*.xlsx"
How the community answered
(52 responses)- A2% (1)
- B83% (43)
- C10% (5)
- D6% (3)
Why each option
DLP file filters can detect Office 2010 files by matching their modern Open XML extensions or by recognizing their underlying ZIP archive structure.
While 'File Type: Microsoft Office(msoffice)' might cover some Office files, it does not specifically address the Open XML (ZIP-based) nature of Office 2010 files as directly as matching 'Archive(zip)' or the specific extensions.
Office 2010 files (DOCX, XLSX, PPTX) are fundamentally ZIP archives containing XML files, so detecting the 'File Type: Archive(zip)' can effectively identify them.
'File Type: Unknown Filetype(unknown)' would only detect files that FortiGate cannot identify, not specific Office 2010 documents.
The extensions '*.ppt', '*.doc', '*.xls' correspond to older Microsoft Office 97-2003 formats, not the Office 2010 (Open XML) formats.
Explicitly configuring filename patterns like '*.pptx', '*.docx', '*.xlsx' directly targets the specific file extensions used by Microsoft Office 2010 and newer versions.
Concept tested: DLP file filtering for Office Open XML
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-security-profiles/123049/data-leak-prevention-dlp
Topics
Community Discussion
No community discussion yet for this question.