Exam4Training

If traffic matches a DLP filter with the action set to Quarantine IP Address, what action does FortiGate take?

If traffic matches a DLP filter with the action set to Quarantine IP Address, what action does FortiGate take?
A . It notifies the administrator by sending an email.
B . It provides a DLP block replacement page with a link to download the file.
C . It blocks all future traffic for that IP address for a configured interval.
D . It archives the data for that IP address.

Answer: C

Explanation:

https://help.fortinet.com/cli/fos50hlp/54/Content/FortiOS/fortiOS-cli-ref-54/config/dlp/sensor.htm

quarantine-ip : block access through the FortiGate unit for any IP address that sends traffic matching a sensor with this action. The IP address is added to the Banned User list for a duration of time that is determined by set expiry.

Exit mobile version