300-720 Question #154: Real Exam Question with Answer & Explanation

Question

A security administrator deployed a Cisco Secure Email Gateway appliance with a mail policy configured to store suspected spam for review. The appliance is the DMZ and only the standard HTTP/HTTPS ports are allowed by the firewall. An administrator wants to ensure that users can view any suspected spam that was blocked. Which action must be taken to meet this requirement?

Options

• AEnable the external Spam Quarantine and enter the IP address and port for the Secure Email and
• BEnable the Spam Quarantine and leave the default settings unchanged.
• CEnable End-User Quarantine Access and point to an LDAP server for authentication.
• DEnable the Spam Quarantine and specify port 80 for HTTP and port 443 for HTTPS

Explanation

Enabling End-User Quarantine Access and pointing to an LDAP server for authentication is the action that must be taken to meet this requirement. End-User Quarantine Access is a feature that allows users to access their personal quarantine on Cisco ESA using their email address and password, without requiring an administrator account or access to Secure Email and Web Manager. To enable End-User Quarantine Access on Cisco ESA, the administrator can follow Select Security Services > IronPort Anti-Spam > End User Safelist/Blocklist Settings and click Under End User Quarantine Access, select Enable End User Quarantine Access. Under Authentication Server, select LDAP Server from the drop-down menu and choose an LDAP server profile from the drop-down menu.

No community discussion yet for this question.