An organization has a Cisco ESA set up with policies and would like to customize the action assigned for violations. The organization wants a copy of the message to be delivered with a message added to flag it as a DLP violation.Which actions must be performed in order to provide this capability?
Answer(s): D
You specify primary and secondary actions that the appliance will take when it detects a possible DLP violation in an outgoing message. Different actions can be assigned for different violation types and severities.Primary actions include: Deliver Drop QuarantineSecondary actions include: Sending a copy to a policy quarantine if you choose to deliver the message. The copy is a perfect clone of the original, including the Message ID. Quarantining a copy allows you to test the DLP system before deployment in addition to providing another way to monitor DLP violations.When you release the copy from the quarantine,the appliance delivers the copy to the recipient, who will have already received the original message. Encrypting messages. The appliance only encrypts the message body. It does not encrypt the message headers. Altering the subject header of messages containing a DLP violation. Adding disclaimer text to messages. Sending messages to an alternate destination mailhost. Sending copies (bcc) of messages to other recipients. (For example, you could copy messages with criticalDLP violations to a compliance officer's mailbox for examination.) Sending a DLP violation notification message to the sender or other contacts, such as a manager or DLPcompliance officer.
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010001.html
Refer to the exhibit.An administrator is adding a new Cisco FTD device to their network and wants to manage it with Cisco FMC.The Cisco FTD is not behind a NAT device.Which command is needed to enable this on the Cisco FTD?
To let FMC manages FTD, first we need to add manager from the FTD and assign a register key of your choice. The command configure manager add 1.1.1.2 the_registration_key_you_want, where 1.1.1.2 is the IPaddress of the FMC, you need to use the same registration key in FMC when adding this FTD as a managed device.
https://cyruslab.net/2019/09/03/ciscocisco-firepower-lab-setup/
A switch with Dynamic ARP Inspection enabled has received a spoofed ARP response on a trusted interface.How does the switch behave in this situation?
Answer(s): B
What is a functional difference between a Cisco ASA and a Cisco IOS router with Zone-based policy firewall?
Answer(s): A
What is a benefit of performing device compliance?
Post your Comments and Discuss Cisco 350-701 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 350-701 content, but please register or login to continue.