NSE4 · Question #5
DLP archiving gives the ability to store session transaction data on a FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)
The correct answer is C. SMTP D. POP3 E. HTTP. FortiGate DLP archiving supports storing session transaction data on a FortiAnalyzer unit for various application-layer protocols such as SMTP, POP3, and HTTP, which carry content susceptible to data loss.
Question
DLP archiving gives the ability to store session transaction data on a FortiAnalyzer unit for which of the following types of network traffic? (Select all that apply.)
Options
- ASNMP
- BIPSec
- CSMTP
- DPOP3
- EHTTP
How the community answered
(21 responses)- B5% (1)
- C95% (20)
Why each option
FortiGate DLP archiving supports storing session transaction data on a FortiAnalyzer unit for various application-layer protocols such as SMTP, POP3, and HTTP, which carry content susceptible to data loss.
SNMP (Simple Network Management Protocol) is used for network device management and does not typically carry sensitive user data that DLP is designed to inspect and archive.
IPSec (Internet Protocol Security) encrypts data at the network layer, making its payload inaccessible to application-layer DLP inspection without prior decryption, which is not the primary function of DLP archiving.
SMTP (Simple Mail Transfer Protocol) traffic involves email content, which is a common target for DLP inspection and archiving to prevent sensitive data from leaving the network via email.
POP3 (Post Office Protocol version 3) traffic involves email content retrieved by clients, making it suitable for DLP inspection and archiving to monitor data download.
HTTP (Hypertext Transfer Protocol) traffic, including web posts, uploads, and downloads, is frequently inspected and archived by DLP to prevent sensitive information from being exfiltrated via web-based applications.
Concept tested: DLP supported protocols for archiving
Source: https://docs.fortinet.com/document/fortigate/7.4.0/fortios-handbook/35763/data-leak-prevention-dlp
Topics
Community Discussion
No community discussion yet for this question.