nerdexam
Cisco

300-720 · Question #181

What is the function of authenticating SMTP sessions using client certificates?

The correct answer is D. If the certificate is valid, the Secure Email Gateway allows an SMTP connection from the mail. When Cisco Secure Email Gateway is configured for client certificate authentication, it requests a TLS client certificate from the connecting mail client during the SMTP session handshake. The gateway validates the certificate against a trusted CA and checks that it has not…

Cisco ESA LDAP, Mail Policies, and Authentication

Question

What is the function of authenticating SMTP sessions using client certificates?

Options

  • AThe Secure Email Gateway requests a client certificate from a user's mail client during connection
  • BIf the Secure Email Gateway is configured to require users to provide a certificate when sending
  • CUsers must configure a mail client to send messages through a secure SSL connection and accept
  • DIf the certificate is valid, the Secure Email Gateway allows an SMTP connection from the mail

How the community answered

(42 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    7% (3)
  • D
    88% (37)

Explanation

When Cisco Secure Email Gateway is configured for client certificate authentication, it requests a TLS client certificate from the connecting mail client during the SMTP session handshake. The gateway validates the certificate against a trusted CA and checks that it has not been revoked. If the certificate is valid and trusted, the Secure Email Gateway permits the SMTP connection to proceed - this is the core function described in option D. Option A describes only one step (requesting the certificate) but not the overall function. Option B is an incomplete fragment. Option C describes general SSL/TLS configuration requirements for the client, not the authentication function itself. The complete purpose is the trust-based access decision in option D.

Topics

#SMTP authentication#Client certificates#Secure Email Gateway#Email security

Community Discussion

No community discussion yet for this question.

Full 300-720 Practice