NSE4 · Question #287
Which of the following DLP actions will override any other action?
The correct answer is A. Exempt. The 'Exempt' action in Data Leak Prevention (DLP) policies will override any other configured DLP action, ensuring that specific traffic is allowed to pass without enforcement.
Question
Which of the following DLP actions will override any other action?
Options
- AExempt
- BQuarantine Interface
- CBlock
- DNone
How the community answered
(37 responses)- A86% (32)
- B3% (1)
- C8% (3)
- D3% (1)
Why each option
The 'Exempt' action in Data Leak Prevention (DLP) policies will override any other configured DLP action, ensuring that specific traffic is allowed to pass without enforcement.
In Data Leak Prevention (DLP) configurations, the 'Exempt' action is designed to override all other DLP actions, ensuring that specific traffic or content matching the exemption criteria will be allowed to pass without being blocked or quarantined, regardless of other active DLP rules.
Quarantine Interface is an enforcement action that redirects traffic to a quarantine, but it does not override other DLP actions; it is a type of action itself.
Block is an enforcement action that prevents traffic from passing, but an explicit 'Exempt' rule will take precedence over a 'Block' rule.
The 'Exempt' action specifically exists to override other actions, making 'None' an incorrect choice.
Concept tested: DLP Action Precedence (Exempt)
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/526779/data-leak-prevention
Topics
Community Discussion
No community discussion yet for this question.