300-720 Question #143: Real Exam Question with Answer & Explanation

Question

An organization wants to designate help desk personnel to assist with tickets that request the release of messages from the spam quarantine because company policy does not permit end- user quarantine access to employees directly. Which two roles must be used for these personnel to release messages while restricting access to make configuration changes in the Cisco ESA? (Choose two.)

Options

• AAdministrator
• BRead-Only Operator
• CTechnician
• DQuarantine Administrator
• EHelp Desk User

Explanation

{"question_number": 5, "correct_answer": "B, E", "explanation": "Two roles together satisfy the requirement to release quarantined messages without allowing configuration changes. The 'Help Desk User' role (Choice E) is specifically designed for personnel who need to manage spam quarantine - they can view, release, and delete quarantined messages but have no access to ESA configuration settings. The 'Read-Only Operator' role (Choice B) allows viewing of system status, logs, and reports without the ability to make configuration changes. Together, these roles provide the quarantine management access needed while enforcing the restriction on configuration changes. Choice A (Administrator) has full access including configuration. Choice C (Technician) can make some configuration changes. Choice D (Quarantine Administrator) may grant broader access than needed. The pairing of Help Desk User and Read-Only Operator precisely meets the principle of least privilege for this scenario.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.