NSE4 · Question #358
Which statement about data leak prevention (DLP) on a FortiGate is true?
The correct answer is D. It can archive files and messages. FortiGate's Data Leak Prevention (DLP) feature includes the capability to archive files and messages that match configured DLP rules.
Question
Which statement about data leak prevention (DLP) on a FortiGate is true?
Options
- ATraffic shaping can be applied to DLP sensors.
- BIt can be applied to a firewall policy in a flow-based VDOM.
- CFiles can be sent to FortiSandbox for detecting DLP threats.
- DIt can archive files and messages.
How the community answered
(18 responses)- C6% (1)
- D94% (17)
Why each option
FortiGate's Data Leak Prevention (DLP) feature includes the capability to archive files and messages that match configured DLP rules.
Traffic shaping is a quality of service (QoS) feature used to manage bandwidth, and it is applied to interfaces or policies, not directly to DLP sensors.
DLP can be applied to firewall policies, and in a flow-based VDOM, all security profiles operate in flow mode, but this statement is a general truth rather than the most specific or defining capability of DLP mentioned among the choices.
FortiSandbox is primarily used for advanced threat protection and sandboxing suspicious files for malware detection, not specifically for detecting DLP threats; DLP typically focuses on identifying sensitive data based on patterns and content.
FortiGate DLP can archive content, such as files and messages, that trigger DLP rules. This archival capability allows for auditing and forensic analysis of sensitive data that attempted to leave the network.
Concept tested: FortiGate DLP capabilities
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/556730/data-leak-prevention-dlp
Topics
Community Discussion
No community discussion yet for this question.