An engineer wants to utilize a digital signature in outgoing emails to validate to others that the email they are receiving was indeed sent and authorized by the owner of that domain. Which two…

The correct answer is C. Public/Private keypair D. Domain signing profile. Digitally signing outgoing emails on Cisco Secure Email Gateway uses DomainKeys Identified Mail (DKIM). Two components are required: (C) a Public/Private keypair - the private key is used to cryptographically sign each outgoing message, while the public key is published in DNS…

Email Authentication and Encryption

Question

An engineer wants to utilize a digital signature in outgoing emails to validate to others that the email they are receiving was indeed sent and authorized by the owner of that domain. Which two components should be configured on the Cisco Secure Email Gateway appliance to achieve this? (Choose two.)

Options

ADMARC verification profile
BSPF record
CPublic/Private keypair
DDomain signing profile
EPKI certificate

How the community answered

(39 responses)

A
5% (2)
B
8% (3)
C
72% (28)
E
15% (6)

Explanation

Digitally signing outgoing emails on Cisco Secure Email Gateway uses DomainKeys Identified Mail (DKIM). Two components are required: (C) a Public/Private keypair - the private key is used to cryptographically sign each outgoing message, while the public key is published in DNS so recipients can verify the signature; and (D) a Domain Signing Profile - this ties the keypair to a specific domain and defines signing parameters (headers to sign, canonicalization method, selector). DMARC (A) is for verifying incoming mail policy, not signing. SPF (B) is a DNS-based sender authorization mechanism, not a signature. A PKI certificate (E) is used for S/MIME encryption/signing, not DKIM domain signing.

Topics

#Email Authentication#DKIM#Digital Signatures#ESA Configuration

Community Discussion

No community discussion yet for this question.

Full 300-720 Practice