NSE4 · Question #351
What information is flushed when the chunk-size value is changed in the config dlp settings?
The correct answer is A. The database for DLP document fingerprinting. Changing the chunk-size value within the FortiGate DLP settings flushes the existing database used for document fingerprinting, requiring it to be rebuilt.
Question
What information is flushed when the chunk-size value is changed in the config dlp settings?
Options
- AThe database for DLP document fingerprinting
- BThe supported file types in the DLP filters
- CThe archived files and messages
- DThe file name patterns in the DLP filters
How the community answered
(41 responses)- A90% (37)
- B2% (1)
- C5% (2)
- D2% (1)
Why each option
Changing the `chunk-size` value within the FortiGate DLP settings flushes the existing database used for document fingerprinting, requiring it to be rebuilt.
Modifying the `chunk-size` in DLP settings directly impacts how files are segmented for fingerprint calculation, thus invalidating and flushing the entire DLP document fingerprinting database.
The `chunk-size` setting has no direct effect on the list of supported file types configured within DLP filters; these are separate configurations.
Changing the DLP `chunk-size` does not flush archived files and messages, as archiving is a separate action storing detected content, independent of fingerprinting chunking.
The `chunk-size` parameter is unrelated to file name patterns used in DLP filters, which define criteria for matching files by their names, not their internal structure.
Concept tested: FortiGate DLP fingerprinting chunk-size
Source: https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-change-DLP-chunk-size/ta-p/192243
Topics
Community Discussion
No community discussion yet for this question.