An organization has a strict policy on URLs embedded in emails. The policy allows visibility into what the URL is but does not allow the user to click it. Which action must be taken to meet the…

The correct answer is A. Defang the URL. Defanging a URL transforms it into a non-clickable format while keeping it human-readable. Common defanging techniques include replacing 'http://' with 'hxxp://', replacing dots with '[.]', or adding brackets around protocol separators (e.g., 'http[:]//example[.]com'). The…

Cisco ESA Content Filters and Message Filters

Question

An organization has a strict policy on URLs embedded in emails. The policy allows visibility into what the URL is but does not allow the user to click it. Which action must be taken to meet the requirements of the security policy?

Options

ADefang the URL.
BEnable the URL quarantine policy.
CReplace the URL with text.
DRedirect the URL to the Cisco security proxy.

How the community answered

(31 responses)

A
77% (24)
B
6% (2)
C
3% (1)
D
13% (4)

Explanation

Defanging a URL transforms it into a non-clickable format while keeping it human-readable. Common defanging techniques include replacing 'http://' with 'hxxp://', replacing dots with '[.]', or adding brackets around protocol separators (e.g., 'http[:]//example[.]com'). The result is visible and understandable to the analyst or user but is no longer a hyperlink that can be accidentally or intentionally clicked. Option B (URL quarantine) removes the email from the inbox entirely. Option C (replace with text) could remove the URL entirely, losing visibility. Option D (redirect to proxy) would still allow the user to follow the URL through a proxy, which violates the 'no clicking' policy.

Topics

#URL defanging#Email security policy enforcement#Content filtering

Community Discussion

No community discussion yet for this question.

Full 300-720 Practice