nerdexam
Fortinet

NSE4 · Question #59

Which Fortinet products & features could be considered part of a comprehensive solution to monitor and prevent the leakage of senstive data? (Select all that apply.)

The correct answer is A. Archive non-compliant outgoing e-mails using FortiMail. B. Restrict unofficial methods of transferring files such as P2P using Application Control lists on a D. Apply a DLP sensor to a firewall policy. A comprehensive data leakage prevention solution involves multiple Fortinet products and features, including FortiMail for email archiving, FortiGate Application Control for P2P restrictions, and DLP sensors on firewall policies.

Submitted by omar99· Apr 18, 2026Security Profiles and Content Inspection

Question

Which Fortinet products & features could be considered part of a comprehensive solution to monitor and prevent the leakage of senstive data? (Select all that apply.)

Options

  • AArchive non-compliant outgoing e-mails using FortiMail.
  • BRestrict unofficial methods of transferring files such as P2P using Application Control lists on a
  • CMonitor database activity using FortiAnalyzer.
  • DApply a DLP sensor to a firewall policy.
  • EConfigure FortiClient to prevent files flagged as sensitive from being copied to a USB disk.

How the community answered

(26 responses)
  • A
    81% (21)
  • C
    4% (1)
  • E
    15% (4)

Why each option

A comprehensive data leakage prevention solution involves multiple Fortinet products and features, including FortiMail for email archiving, FortiGate Application Control for P2P restrictions, and DLP sensors on firewall policies.

AArchive non-compliant outgoing e-mails using FortiMail.Correct

FortiMail provides email security, including content archiving and policy enforcement, which can identify and store non-compliant outgoing emails that might contain sensitive data, thus preventing leakage.

BRestrict unofficial methods of transferring files such as P2P using Application Control lists on aCorrect

Application Control on a FortiGate can identify and block or restrict applications like P2P file sharing, which are frequently used for unauthorized data transfer, directly preventing data leakage.

CMonitor database activity using FortiAnalyzer.

FortiAnalyzer is primarily a logging, reporting, and analysis tool for collected logs, not a direct real-time monitor of database activity for preventing leakage; a dedicated database security solution would fulfill that role.

DApply a DLP sensor to a firewall policy.Correct

Applying a DLP (Data Loss Prevention) sensor to a firewall policy on a FortiGate actively inspects network traffic for sensitive data patterns and can block or log transmissions that violate policies, directly preventing data leakage.

EConfigure FortiClient to prevent files flagged as sensitive from being copied to a USB disk.

While FortiClient can provide endpoint DLP by preventing sensitive files from being copied to USB, this is a local endpoint control and not a network-level or gateway-level measure that is often emphasized in a comprehensive data leakage prevention strategy covering broader traffic flows.

Concept tested: Data Leakage Prevention (DLP) solutions

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/13360/data-leak-prevention

Topics

#DLP#FortiGate#FortiMail#Application Control

Community Discussion

No community discussion yet for this question.

Full NSE4 Practice