300-720 Question #123: Real Exam Question with Answer & Explanation

Question

An engineer is tasked with creating a content filter to catch attachments, including credit card numbers, and hold them for review until further action is taken. Which component on a Cisco ESA must be configured to meet this requirement?

Options

• ASpam Quarantine
• BOutbreak Filter
• CPolicy Quarantine
• DContent Filter

Explanation

{"question_number": 8, "question": "An engineer is tasked with creating a content filter to catch attachments, including credit card numbers, and hold them for review until further action is taken.", "correct_answer": "D", "explanation": "A Content Filter on the Cisco ESA is the correct tool for inspecting email content - including attachments - for sensitive patterns such as credit card numbers (using DLP or regex-based matching). When a match is found, the content filter action can route the message to a Policy Quarantine, where an administrator can review it before deciding to release, delete, or further process it. Option A (Spam Quarantine) is specifically for holding messages identified as spam - it is not designed for policy-based DLP holds. Option B (Outbreak Filter) addresses malware and phishing threats using Cisco threat intelligence, not DLP content inspection. Option C (Policy Quarantine) is the quarantine destination used by the content filter, not the filter mechanism itself - you must configure the Content Filter to send to the Policy Quarantine.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.