nerdexam
Fortinet

NSE4 · Question #287

Which of the following DLP actions will override any other action?

The correct answer is A. Exempt. The 'Exempt' action in Data Leak Prevention (DLP) policies will override any other configured DLP action, ensuring that specific traffic is allowed to pass without enforcement.

Submitted by deeparc· Apr 18, 2026Security Profiles and Content Inspection

Question

Which of the following DLP actions will override any other action?

Options

  • AExempt
  • BQuarantine Interface
  • CBlock
  • DNone

How the community answered

(37 responses)
  • A
    86% (32)
  • B
    3% (1)
  • C
    8% (3)
  • D
    3% (1)

Why each option

The 'Exempt' action in Data Leak Prevention (DLP) policies will override any other configured DLP action, ensuring that specific traffic is allowed to pass without enforcement.

AExemptCorrect

In Data Leak Prevention (DLP) configurations, the 'Exempt' action is designed to override all other DLP actions, ensuring that specific traffic or content matching the exemption criteria will be allowed to pass without being blocked or quarantined, regardless of other active DLP rules.

BQuarantine Interface

Quarantine Interface is an enforcement action that redirects traffic to a quarantine, but it does not override other DLP actions; it is a type of action itself.

CBlock

Block is an enforcement action that prevents traffic from passing, but an explicit 'Exempt' rule will take precedence over a 'Block' rule.

DNone

The 'Exempt' action specifically exists to override other actions, making 'None' an incorrect choice.

Concept tested: DLP Action Precedence (Exempt)

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/526779/data-leak-prevention

Topics

#DLP#Data Loss Prevention#Security Profiles#Action Priority

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice