300-720 · Question #145
Refer to the exhibit. A network engineer must set up a content filter to find any messages that failed SPF and send them into quarantine. The content filter has been set up and enabled, but all…
The correct answer is C. spf-status. The described behavior - quarantining all messages except those that failed SPF - indicates the filter condition is logically inverted. The spf-status condition in the content filter is the component that evaluates the SPF check result and determines which messages match the…
Question
Refer to the exhibit. A network engineer must set up a content filter to find any messages that failed SPF and send them into quarantine. The content filter has been set up and enabled, but all messages except those that have failed SPF are being sent into quarantine. Which section of the filter must be modified to correct this behavior?
Exhibit
Options
- Alog-entry
- Bquarantine
- Cspf-status
- Dskip-filters
How the community answered
(30 responses)- A10% (3)
- B3% (1)
- C83% (25)
- D3% (1)
Explanation
The described behavior - quarantining all messages except those that failed SPF - indicates the filter condition is logically inverted. The spf-status condition in the content filter is the component that evaluates the SPF check result and determines which messages match the filter rule. If the spf-status is currently set to match 'pass' (or any status other than 'fail'), the filter will act on every message that passed SPF while ignoring failures - exactly the inverted behavior described. Modifying the spf-status condition to match 'fail' (or 'softfail'/'none' as appropriate) will correct the filter to only quarantine messages that actually failed SPF. The other sections (log-entry, quarantine action, skip-filters) control what happens after a match is found, not which messages are matched.
Topics
Community Discussion
No community discussion yet for this question.