Which statements regarding banned words are correct? (Choose two.)

The action taken when a banned word is detected (e.g., blocking) is configurable within DLP policies, often based on thresholds or policy settings, and is not automatically a block for every single instance.

Banned word lists are typically custom-defined by the administrator and are not automatically updated by FortiGuard on a periodic basis; FortiGuard provides updates for other security services like AV and web filtering categories.

FortiGate units can inspect application-layer traffic, including content from web pages (HTTP/HTTPS) and email messages (SMTP/POP3/IMAP), for the presence of configured banned words.

Banned words can be specified with high flexibility using various patterns, including exact text strings, wildcard characters for partial matches, and robust regular expressions for complex pattern detection.