NSE4 Question #181: Real Exam Question with Answer & Explanation

Question

Which of the following statements regarding Banned Words are correct? (Select all that apply.)

Options

• AThe FortiGate unit can scan web pages and email messages for instances of banned words.
• BWhen creating a banned word list, an administrator can indicate either specific words or patterns.
• CBanned words can be expressed as wildcards or regular expressions.
• DContent is automatically blocked if a single instance of a banned word appears.
• EThe FortiGate unit includes a pre-defined library of common banned words.

Explanation

FortiGate's Banned Words feature, often part of Data Leak Prevention (DLP), allows scanning of web and email content for specific words, patterns, wildcards, or regular expressions defined by an administrator.

Common mistakes.

• D. The action taken (e.g., block, log, monitor) and thresholds for triggering an action are configurable within the DLP sensor, meaning content is not automatically blocked on a single instance without explicit configuration.
• E. FortiGate does not typically ship with a pre-defined library of common banned words; administrators are responsible for creating and customizing their own lists according to organizational policies.

Concept tested. FortiGate Banned Words and DLP configuration

Reference. https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/575345/banned-words

No community discussion yet for this question.