Which statements regarding banned words are correct?

The statement that the FortiGate can scan web pages and email messages for instances of banned words is accurate. This capability is part of FortiGate's content filtering mechanisms, where the system actively inspects the content of various types of traffic, including web and email communications. By doing so, FortiGate can enforce organizational policies regarding inappropriate or sensitive content, thereby enhancing security and compliance with regulatory requirements.

Scanning encompasses both static content, such as the text within web pages, and dynamic content, which may appear in the body of email messages. The detection of banned words is essential for maintaining a safe and secure communication environment, allowing administrators to manage and mitigate risks associated with inappropriate content.

In terms of the other options, content being blocked upon a single instance of a banned word or periodic updates from FortiGate about banned words would not be accurate, as blocking typically depends on the specific configuration and policies in place, which may require multiple instances or additional context. Furthermore, while banned words can be expressed in various formats like text, wildcards, and regular expressions, the choice that states the scanning capability best highlights the FortiGate system's proactive measures in content monitoring.