nerdexam
Fortinet

NSE4_FGT-7.0 · Question #103

Which of the following services can be inspected by the DLP profile? (Choose three.)

The correct answer is B. FTP C. IMAP E. HTTP-POST. FortiGate DLP profiles are designed to inspect specific application-layer protocols to prevent the leakage of sensitive data. This includes common web, email, and file transfer services.

Security Profiles

Question

Which of the following services can be inspected by the DLP profile? (Choose three.)

Options

  • ANFS
  • BFTP
  • CIMAP
  • DCIFS
  • EHTTP-POST

How the community answered

(40 responses)
  • A
    5% (2)
  • B
    93% (37)
  • D
    3% (1)

Why each option

FortiGate DLP profiles are designed to inspect specific application-layer protocols to prevent the leakage of sensitive data. This includes common web, email, and file transfer services.

ANFS

NFS (Network File System) is a distributed file system protocol that is not among the primary services supported for deep content inspection by FortiGate's Data Loss Prevention profiles.

BFTPCorrect

FTP (File Transfer Protocol) is a common protocol for transferring files, and FortiGate DLP profiles can inspect FTP traffic to detect and prevent the exfiltration of sensitive data.

CIMAPCorrect

IMAP (Internet Message Access Protocol) is used for retrieving emails, and DLP profiles can scan IMAP traffic to ensure that sensitive information is not sent out through email communications.

DCIFS

While FortiGate offers various security features, its Data Loss Prevention profile's deep content inspection capabilities are not primarily targeted at network file system protocols like CIFS in the same manner as web, email, or explicit file transfer protocols.

EHTTP-POSTCorrect

HTTP-POST requests are frequently used to upload data to web servers, and DLP profiles can inspect the content of these requests to prevent sensitive information from being posted to unauthorized destinations.

Concept tested: FortiGate DLP inspectable services

Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/339174/data-leak-prevention-dlp-and-data-in-motion

Topics

#DLP profile#Protocol inspection#FTP#IMAP

Community Discussion

No community discussion yet for this question.

Full NSE4_FGT-7.0 Practice