NSE4_FGT-7.0 · Question #94
What information is flushed when the chunk-size value is changed in the config dlp settings?
The correct answer is A. The database for DLP document fingerprinting. Changing the chunk-size value in DLP settings flushes the DLP document fingerprinting database because existing fingerprints become invalid with the new chunking methodology.
Question
What information is flushed when the chunk-size value is changed in the config dlp settings?
Options
- AThe database for DLP document fingerprinting
- BThe supported file types in the DLP filters
- CThe archived files and messages
- DThe file name patterns in the DLP filters
How the community answered
(66 responses)- A89% (59)
- B2% (1)
- C3% (2)
- D6% (4)
Why each option
Changing the `chunk-size` value in DLP settings flushes the DLP document fingerprinting database because existing fingerprints become invalid with the new chunking methodology.
DLP document fingerprinting works by breaking content into fixed-size 'chunks' and hashing them to create a unique identifier. If the `chunk-size` is modified, the method of breaking down documents changes, rendering all previously generated fingerprints incompatible and requiring the database to be flushed so new fingerprints can be created.
The `chunk-size` setting defines how content is analyzed for fingerprinting, not which file types are supported by the DLP filters.
Archived files and messages are historical records of DLP events; changing the `chunk-size` does not affect already stored content or their archiving status.
File name patterns are used for identifying files based on their names, which is a separate mechanism from the internal content analysis and chunking used for document fingerprinting.
Concept tested: FortiGate DLP document fingerprinting configuration
Source: https://docs.fortinet.com/document/fortigate/7.2.0/cli-reference/641010/config-dlp-settings
Topics
Community Discussion
No community discussion yet for this question.