An engineer is tasked with creating a content filter to catch attachments, including credit card numbers, and hold them for review until further action is taken. Which component on a Cisco ESA must…

The correct answer is D. Content Filter. A Content Filter on the Cisco ESA is the correct tool for inspecting email content - including attachments - for sensitive patterns such as credit card numbers (using DLP or regex-based matching). When a match is found, the content filter action can route the message to a…

Cisco ESA Content Filters and Message Filters

Question

An engineer is tasked with creating a content filter to catch attachments, including credit card numbers, and hold them for review until further action is taken. Which component on a Cisco ESA must be configured to meet this requirement?

Options

ASpam Quarantine
BOutbreak Filter
CPolicy Quarantine
DContent Filter

How the community answered

(29 responses)

A
3% (1)
B
3% (1)
C
7% (2)
D
86% (25)

Explanation

A Content Filter on the Cisco ESA is the correct tool for inspecting email content - including attachments - for sensitive patterns such as credit card numbers (using DLP or regex-based matching). When a match is found, the content filter action can route the message to a Policy Quarantine, where an administrator can review it before deciding to release, delete, or further process it. Option A (Spam Quarantine) is specifically for holding messages identified as spam - it is not designed for policy-based DLP holds. Option B (Outbreak Filter) addresses malware and phishing threats using Cisco threat intelligence, not DLP content inspection. Option C (Policy Quarantine) is the quarantine destination used by the content filter, not the filter mechanism itself - you must configure the Content Filter to send to the Policy Quarantine.

Topics

#Content Filtering#Cisco ESA#Data Loss Prevention#Quarantine

Community Discussion

No community discussion yet for this question.

Full 300-720 Practice