300-720 Question #177: Real Exam Question with Answer & Explanation

Question

An engineer must configure Cisco Secure Email Gateway to scan all email from the HR department for viruses. The Sophos scanning engine must be used, and messages that potentially still contain viruses after repair must be quarantined. These configurations were performed already: - Enable antivirus scanning on the email gateway. - Create a mail policy for the HR department. Which two actions must be taken to complete the configuration? (Choose two.)

Options

• AFrom the Message Scanning settings, enable the dropping of attachments.
• BFrom the Message Scanning settings, enable Scan and Repair Viruses.
• CFrom the Message Scanning settings, enable Scan for Viruses only.
• DConfigure Virus Infected Message Handling to quarantine the messages.
• EConfigure Unscannable Message Handling to quarantine the messages.

Explanation

{"question_number": 6, "question": "An engineer must configure Cisco Secure Email Gateway to scan all email from the HR department for viruses using Sophos, quarantining messages that potentially still contain viruses after repair.", "correct_answer": "B and D", "explanation": "Two additional steps are required after enabling antivirus scanning and creating the HR mail policy. First, from the Message Scanning settings, 'Scan and Repair Viruses' (B) must be enabled - this mode instructs the Sophos engine to both detect and attempt to repair infected messages, which is necessary before the 'still infected after repair' condition can be evaluated. Second, 'Virus Infected Message Handling' (D) must be configured to quarantine messages - this setting specifically controls what happens to messages that remain infected even after a repair attempt, meeting the stated requirement. Option A (drop attachments) is too aggressive and not what was asked. Option C (Scan for Viruses only) would not attempt repair, making the post-repair quarantine logic irrelevant. Option E (Unscannable Message Handling) applies to messages the engine cannot process, not to repaired-but-still-infected messages.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.