ExamGecko
Question list
Search
Search

Question 226 - 350-701 discussion

Report
Export

A Cisco ESA administrator has been tasked with configuring the Cisco ESA to ensure there are no viruses before quarantined emails are delivered. In addition, delivery of mail from known bad mail servers must be prevented. Which two actions must be taken in order to meet these requirements?

(Choose two)

A.

Use outbreak filters from SenderBase

Answers
A.

Use outbreak filters from SenderBase

B.

Enable a message tracking service

Answers
B.

Enable a message tracking service

C.

Configure a recipient access table

Answers
C.

Configure a recipient access table

D.

Deploy the Cisco ESA in the DMZ

Answers
D.

Deploy the Cisco ESA in the DMZ

E.

Scan quarantined emails using AntiVirus signatures

Answers
E.

Scan quarantined emails using AntiVirus signatures

Suggested answer: A, E

Explanation:

We should scan emails using AntiVirus signatures to make sure there are no viruses attached in emails.

Note: A virus signature is the fingerprint of a virus. It is a set of unique data, or bits of code, that allow it to be identified. Antivirus software uses a virus signature to find a virus in a computer file system, allowing to detect, quarantine, and remove the virus.

SenderBase is an email reputation service designed to help email administrators research senders, identify legitimate sources of email, and block spammers. When the Cisco ESA receives messages from known or highly reputable senders, it delivers them directly to the end user without any content scanning. However, when the Cisco ESA receives email messages from unknown or less reputable senders, it performs antispam and antivirus scanning.

Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_0100100.html-> Therefore Outbreak filters can be used to block emails from bad mail servers.

Web servers and email gateways are generally located in the DMZ so

Note: The recipient access table (RAT), not to be confused with remote-access Trojan (also RAT), is a Cisco ESA term that defines which recipients are accepted by a public listener.

asked 10/10/2024
Mohamed Isaaq
31 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first