NSE4_FGT-7.0 · Question #103
Which of the following services can be inspected by the DLP profile? (Choose three.)
The correct answer is B. FTP C. IMAP E. HTTP-POST. FortiGate DLP profiles are designed to inspect specific application-layer protocols to prevent the leakage of sensitive data. This includes common web, email, and file transfer services.
Question
Which of the following services can be inspected by the DLP profile? (Choose three.)
Options
- ANFS
- BFTP
- CIMAP
- DCIFS
- EHTTP-POST
How the community answered
(40 responses)- A5% (2)
- B93% (37)
- D3% (1)
Why each option
FortiGate DLP profiles are designed to inspect specific application-layer protocols to prevent the leakage of sensitive data. This includes common web, email, and file transfer services.
NFS (Network File System) is a distributed file system protocol that is not among the primary services supported for deep content inspection by FortiGate's Data Loss Prevention profiles.
FTP (File Transfer Protocol) is a common protocol for transferring files, and FortiGate DLP profiles can inspect FTP traffic to detect and prevent the exfiltration of sensitive data.
IMAP (Internet Message Access Protocol) is used for retrieving emails, and DLP profiles can scan IMAP traffic to ensure that sensitive information is not sent out through email communications.
While FortiGate offers various security features, its Data Loss Prevention profile's deep content inspection capabilities are not primarily targeted at network file system protocols like CIFS in the same manner as web, email, or explicit file transfer protocols.
HTTP-POST requests are frequently used to upload data to web servers, and DLP profiles can inspect the content of these requests to prevent sensitive information from being posted to unauthorized destinations.
Concept tested: FortiGate DLP inspectable services
Source: https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/339174/data-leak-prevention-dlp-and-data-in-motion
Topics
Community Discussion
No community discussion yet for this question.