QUESTION: 61

To comply with a recent audit, an engineer must configure anti-virus message handling options on the incoming mail policies to attach warnings to the subject of an email.

What should be configured to meet this requirement for known viral emails?

Virus Infected Messages
B Unscannable Messages
Encrypted Messages
Positively Identified Messages

Answer(s): A

Explanation:

Message Handling Settings:

Repaired Message Handling
Messages are considered repaired if the message was completely scanned and all viruses have been repaired or removed. These messages will be delivered as is.

Encrypted Message Handling
Messages are considered encrypted if the engine is unable to finish the scan due to an encrypted or protected field in the message. Messages that are marked encrypted may also be repaired.

Unscannable Message Handling
Messages are considered unscannable if a scanning timeout value has been reached, or the engine becomes unavailable due to an internal error. Messages that are marked unscannable may also be repaired.

Virus Infected Message Handling
The system may be unable to drop the attachment or completely repair a message. In these cases, you can configure how the system handles messages that could still contain viruses.

https://www.cisco.com/c/en/us/td/docs/security/esa/esa12- 0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html#con_1132282

Reveal Solution Next Question

QUESTION: 62

An administrator is managing multiple Cisco ESA devices and wants to view the quarantine emails from all devices in a central location.

How is this accomplished?

Disable the VOF feature before sending SPAM to the external quarantine.
Configure a mail policy to determine whether the message is sent to the local or external quarantine.
Disable the local quarantine before sending SPAM to the external quarantine.
Configure a user policy to determine whether the message is sent to the local or external quarantine.

Answer(s): C

Explanation:

Disabling the Local Spam Quarantine to Activate the External Quarantine If you were using a local spam quarantine before enabling an external spam quarantine, you must disable the local quarantine in order to send messages to the external quarantine. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11- 1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_0101010.html?bookSearc h=true#con_1172419

Reveal Solution Next Question

QUESTION: 63

A Cisco ESA administrator has several mail policies configured.
While testing policy match using a specific sender, the email was not matching the expected policy.

What is the reason of this?

The Tram* header is checked against all policies in a top-down fashion.
The message header with the highest priority is checked against each policy in a top-down fashion.
The To" header is checked against all policies in a top-down fashion.
The message header with the highest priority is checked against the Default policy in a top-down fashion.

Answer(s): B

Explanation:

The envelope sender and the envelope recipeint have a higher priority over the sender header when you match a message to a mail policy. If you configure a mail policy to match a specific user, the messages are automatically classified into the mail policy based on the envelope sender and the envelope recipient. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11- 1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html

Reveal Solution Next Question

QUESTION: 64

An administrator identifies that, over the past week, the Cisco ESA is receiving many emails from certain senders and domains which are being consistently quarantined. The administrator wants to ensure that these senders and domain are unable to send anymore emails.

Which feature on Cisco ESA should be used to achieve this?

incoming mail policies
safelist
blocklist
S/MIME Sending Profile

Answer(s): A

Explanation:

The appliance enforces your organization's policies for messages sent to and from your users through the use of mail policies. These are sets of rules that specify the types of suspect, sensitive, or malicious content that your organization may not want entering or leaving your network. This content may include:

-spam
-legitimate marketing messages
-graymail
-viruses
-phishing and other targeted mail attacks
-confidential corporate data
-personally identifiable information https://www.cisco.com/c/en/us/td/docs/security/esa/esa11- 1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html?bookSearch=t rue

Reveal Solution Next Question

Free 300-720 Exam Braindumps (page: 16)

QUESTION: 61

Explanation:

QUESTION: 62

Explanation:

QUESTION: 63

Explanation:

QUESTION: 64

Explanation: