Drag and Drop Question An administrator must ensure that emails sent from [email protected] are routed through an alternate virtual gateway. Drag and drop the snippet from the bottom onto the…

Question

Exhibit

Answer Area

Explanation

The question tests the ability to configure an email gateway message filter to route emails from a specific sender through an alternate delivery interface by correctly identifying the mail-from condition and the delivery-int action.

Approach. The correct interaction is to drag 'mail-from =="[email protected]"' into the 'if' condition blank and 'delivery-int("delivery_interface");' into the action blank. The reason for this is twofold: First, for the condition, 'mail-from' refers to the envelope sender address, which is the address used during the SMTP transaction (RFC 5321) for routing and policy enforcement, making it the most appropriate identifier for filtering emails based on the sender for routing purposes. Second, for the action, 'delivery-int("delivery_interface");' explicitly assigns a specific network interface ('delivery_interface' in this case) for outbound email delivery. This directly fulfills the requirement to route emails through an 'alternate virtual gateway' by specifying the interface linked to that gateway.

Common mistakes.

• common_mistake. Using 'Envelope-sender' or 'Sender' for the condition: While 'Envelope-sender' is semantically close to 'mail-from', 'mail-from' is the common syntax for specifying the envelope sender in many email gateway policy languages. 'Sender' typically refers to the 'From' header field, which is easily spoofed and not the primary mechanism for low-level SMTP routing decisions. Using 'alt-src-host("delivery_interface");' for the action: This function is generally used to specify the source IP address for outbound connections from a particular interface, rather than explicitly dictating which interface to use for the entire delivery process. The requirement is to route through an alternate virtual gateway via an interface, which 'delivery-int' is designed to handle more directly for specifying the outbound interface.

Concept tested. Email gateway message filter syntax, understanding of SMTP envelope sender (mail-from) vs. header sender, and specific functions for outbound email routing and interface selection in an email security appliance (e.g., Cisco Email Security Appliance - ESA).

No community discussion yet for this question.