Fortinet Exam NSE6_FML-7.2 Topic 3 Question 14 Discussion

Actual exam question for Fortinet's NSE6_FML-7.2 exam

Question #: 14
Topic #: 3

[All NSE6_FML-7.2 Questions]

What are two disadvantages of configuring the dictionary and DLP scan rule aggressiveness too high? (Choose two.)

AHigh aggressiveness scan settings do not support executable file types.

BIt is more resource intensive

CMore false positives could be detected.

DFortiMail requires more disk space for the additional rules.

Show Suggested Answer

Suggested Answer: B, C

by Portia at Feb 14, 2024, 02:02 AM

Limited Time Offer

25%

Off

Get Premium NSE6_FML-7.2 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Devora

9 hours ago

Yes, I agree. More false positives mean more time spent investigating potential issues.

upvoted 0 times

...

Rikki

1 days ago

I think one disadvantage is that high aggressiveness can lead to more false positives.

upvoted 0 times

...

Yeah, that option seems a bit odd. I'd go with B and C as the two main drawbacks - more resource-intensive and increased false positives. Can't really see a good reason to set the aggressiveness that high in the first place.

upvoted 0 times

Simona

6 days ago

Seems like the best approach is to set it at a level where it's effective without causing unnecessary strain.

upvoted 0 times

...

Veronika

7 days ago

I think that's why the option to configure the dictionary and DLP scan rules is there - to strike that balance.

upvoted 0 times

...

Dominga

8 days ago

Exactly, it's important to find the right balance between security and performance.

upvoted 0 times

...

Lizbeth

9 days ago

Definitely not worth it if it's going to use up more resources and give inaccurate results.

upvoted 0 times

...

Joana

10 days ago

Yeah, and it can also lead to more false positives being flagged.

upvoted 0 times

...

Adaline

11 days ago

I agree, setting the aggressiveness too high can really slow things down.

upvoted 0 times

...

Lonny

24 days ago

Absolutely. And I'm not sure I buy the idea that high aggressiveness settings don't support executable file types. That doesn't really make sense to me.

upvoted 0 times

...

Kasandra

25 days ago

I agree with that. Setting the aggressiveness too high can really bog down the system and lead to a lot of unnecessary alerts that end up being false alarms. That's going to create a lot of extra work for the security team.

upvoted 0 times

...

Charisse

26 days ago

Hmm, this is an interesting question. I think the key disadvantages of configuring the dictionary and DLP scan rule aggressiveness too high are the increased resource usage and the potential for more false positives.

upvoted 0 times

...

Fortinet Exam NSE6_FML-7.2 Topic 3 Question 14 Discussion

Contribute your Thoughts:

Devora

Rikki

Juliann

Simona

Veronika

Dominga

Lizbeth

Joana

Adaline

Lonny

Kasandra

Charisse