Fortinet Exam NSE6_FML-7.2 Topic 3 Question 14 Discussion

Actual exam question for Fortinet's NSE6_FML-7.2 exam

Question #: 14
Topic #: 3

[All NSE6_FML-7.2 Questions]

What are two disadvantages of configuring the dictionary and DLP scan rule aggressiveness too high? (Choose two.)

AHigh aggressiveness scan settings do not support executable file types.

BIt is more resource intensive

CMore false positives could be detected.

DFortiMail requires more disk space for the additional rules.

Show Suggested Answer

Suggested Answer: B, C

by Portia at Feb 14, 2024, 02:02 AM

Limited Time Offer

25%

Off

Get Premium NSE6_FML-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Rikki

7 months ago

That's a good point. More rules could mean more storage needed for them.

upvoted 0 times

...

Ming

7 months ago

Another disadvantage could be that configuring it too high might make FortiMail require more disk space.

upvoted 0 times

...

Devora

7 months ago

Yes, I agree. More false positives mean more time spent investigating potential issues.

upvoted 0 times

...

Rikki

7 months ago

I think one disadvantage is that high aggressiveness can lead to more false positives.

upvoted 0 times

...

Yeah, that option seems a bit odd. I'd go with B and C as the two main drawbacks - more resource-intensive and increased false positives. Can't really see a good reason to set the aggressiveness that high in the first place.

upvoted 0 times

Simona

7 months ago

Seems like the best approach is to set it at a level where it's effective without causing unnecessary strain.

upvoted 0 times

...

Veronika

8 months ago

I think that's why the option to configure the dictionary and DLP scan rules is there - to strike that balance.

upvoted 0 times

...

Dominga

8 months ago

Exactly, it's important to find the right balance between security and performance.

upvoted 0 times

...

Lizbeth

8 months ago

Definitely not worth it if it's going to use up more resources and give inaccurate results.

upvoted 0 times

...

Joana

8 months ago

Yeah, and it can also lead to more false positives being flagged.

upvoted 0 times

...

Adaline

8 months ago

I agree, setting the aggressiveness too high can really slow things down.

upvoted 0 times

...

Lonny

8 months ago

Absolutely. And I'm not sure I buy the idea that high aggressiveness settings don't support executable file types. That doesn't really make sense to me.

upvoted 0 times

...

Kasandra

8 months ago

I agree with that. Setting the aggressiveness too high can really bog down the system and lead to a lot of unnecessary alerts that end up being false alarms. That's going to create a lot of extra work for the security team.

upvoted 0 times

...

Charisse

8 months ago

Hmm, this is an interesting question. I think the key disadvantages of configuring the dictionary and DLP scan rule aggressiveness too high are the increased resource usage and the potential for more false positives.

upvoted 0 times

...

Fortinet Exam NSE6_FML-7.2 Topic 3 Question 14 Discussion

Contribute your Thoughts:

Rikki

Ming

Devora

Rikki

Juliann

Simona

Veronika

Dominga

Lizbeth

Joana

Adaline

Lonny

Kasandra

Charisse