nerdexam
Cisco

300-720 · Question #178

An engineer must configure a mail policy for all incoming email that contains a Microsoft Excel attachment. All such email must be quarantined without any exception. After the incoming mail policy…

The correct answer is B. Create an incoming content filter to match required attachments. Mail policies alone define which group of senders/recipients a set of rules applies to, but they do not perform inspection or action by themselves. To quarantine messages with specific attachment types (Excel files), a content filter must be created that matches on attachment…

Cisco ESA Content Filters and Message Filters

Question

An engineer must configure a mail policy for all incoming email that contains a Microsoft Excel attachment. All such email must be quarantined without any exception. After the incoming mail policy is created, which action must be taken next to meet the requirement?

Options

  • ASet the quarantine threat level threshold to 1.
  • BCreate an incoming content filter to match required attachments.
  • CConfigure the Outgoing Content Filters settings.
  • DSet the quarantine threat level threshold to 5.

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    73% (24)
  • C
    9% (3)
  • D
    15% (5)

Explanation

Mail policies alone define which group of senders/recipients a set of rules applies to, but they do not perform inspection or action by themselves. To quarantine messages with specific attachment types (Excel files), a content filter must be created that matches on attachment file type or MIME type (e.g., .xlsx, .xls, application/vnd.ms-excel), with a quarantine action configured. This content filter is then applied to the HR incoming mail policy. Options A and D (quarantine threat level thresholds) relate to outbreak filter sensitivity, not attachment-based quarantine rules. Option C (Outgoing Content Filters) is irrelevant since the requirement is for incoming email.

Topics

#Content Filters#Attachment Filtering#Mail Policies#Quarantine Actions

Community Discussion

No community discussion yet for this question.

Full 300-720 Practice