Courseiva
Security ProfileshardMultiple ChoiceObjective-mapped

NSE4 Security Profiles Practice Question

An administrator has configured DLP sensors to detect credit card numbers in outgoing traffic. However, the administrator notices that traffic containing credit card numbers is still passing through undetected. The firewall policy uses flow-based inspection. What is the MOST likely reason DLP is not detecting the data?

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

DLP requires proxy-based inspection to perform data leakage detection.

DLP requires proxy-based inspection to buffer and analyze the content. Flow-based inspection does not support DLP.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • DLP requires proxy-based inspection to perform data leakage detection.

    Why this is correct

    DLP scanning requires proxy-based inspection because it needs to buffer the content for pattern matching.

  • The DLP sensor is not applied to the correct firewall policy.

    Why it's wrong here

    Even if applied, flow-based inspection does not support DLP.

  • The DLP sensor is configured with the wrong regular expression.

    Why it's wrong here

    Configuration might be correct, but flow mode cannot detect it.

  • The credit card numbers are encrypted by SSL and deep inspection is not enabled.

    Why it's wrong here

    This could be a secondary issue, but the primary issue is inspection mode.

About these practice questions

This NSE4 question is part of Courseiva's 282-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This NSE4 practice question is part of Courseiva's free Fortinet certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NSE4 exam.