nerdexam
Fortinet

NSE4 · Question #181

Which of the following statements regarding Banned Words are correct? (Select all that apply.)

The correct answer is A. The FortiGate unit can scan web pages and email messages for instances of banned words. B. When creating a banned word list, an administrator can indicate either specific words or patterns. C. Banned words can be expressed as wildcards or regular expressions. FortiGate's Banned Words feature, often part of Data Leak Prevention (DLP), allows scanning of web and email content for specific words, patterns, wildcards, or regular expressions defined by an administrator.

Submitted by lars.no· Apr 18, 2026Security Profiles and Content Inspection

Question

Which of the following statements regarding Banned Words are correct? (Select all that apply.)

Options

  • AThe FortiGate unit can scan web pages and email messages for instances of banned words.
  • BWhen creating a banned word list, an administrator can indicate either specific words or patterns.
  • CBanned words can be expressed as wildcards or regular expressions.
  • DContent is automatically blocked if a single instance of a banned word appears.
  • EThe FortiGate unit includes a pre-defined library of common banned words.

How the community answered

(35 responses)
  • A
    89% (31)
  • D
    3% (1)
  • E
    9% (3)

Why each option

FortiGate's Banned Words feature, often part of Data Leak Prevention (DLP), allows scanning of web and email content for specific words, patterns, wildcards, or regular expressions defined by an administrator.

AThe FortiGate unit can scan web pages and email messages for instances of banned words.Correct

FortiGate units with appropriate security profiles can inspect HTTP/HTTPS (with SSL inspection) and email (SMTP, POP3, IMAP) traffic to detect instances of configured banned words.

BWhen creating a banned word list, an administrator can indicate either specific words or patterns.Correct

Administrators have the flexibility to define banned word lists using either exact keywords or more advanced patterns, including wildcards and regular expressions, to match sensitive or prohibited content.

CBanned words can be expressed as wildcards or regular expressions.Correct

Banned words can be expressed using powerful pattern matching capabilities, including standard wildcards (*?) and regular expressions (regex), to identify varied forms or contexts of the sensitive terms.

DContent is automatically blocked if a single instance of a banned word appears.

The action taken (e.g., block, log, monitor) and thresholds for triggering an action are configurable within the DLP sensor, meaning content is not automatically blocked on a single instance without explicit configuration.

EThe FortiGate unit includes a pre-defined library of common banned words.

FortiGate does not typically ship with a pre-defined library of common banned words; administrators are responsible for creating and customizing their own lists according to organizational policies.

Concept tested: FortiGate Banned Words and DLP configuration

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/575345/banned-words

Topics

#Banned Words#Content Inspection#Security Profiles#Web Filtering

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full NSE4 Practice