Refer to the exhibit. How does the Cisco Secure Email Gateway handle an email with an unknown Microsoft Word document?

The correct answer is C. The file is sent to the cloud for file analysis. Cisco Secure Email Gateway with Advanced Malware Protection (AMP) uses file reputation and file analysis. When a file type such as a Microsoft Word document is encountered and its reputation is unknown (not definitively clean or malicious), the SEG sends the file to the Cisco…

Cisco ESA Spam Control and Anti-Malware

Question

Exhibit

Options

AThe email is delivered without file analysis.
BThe email is quarantined.
CThe file is sent to the cloud for file analysis.
DThe email is dropped.

How the community answered

(25 responses)

A
4% (1)
C
88% (22)
D
8% (2)

Explanation

Cisco Secure Email Gateway with Advanced Malware Protection (AMP) uses file reputation and file analysis. When a file type such as a Microsoft Word document is encountered and its reputation is unknown (not definitively clean or malicious), the SEG sends the file to the Cisco Threat Grid cloud sandbox for dynamic file analysis. The file is executed in an isolated environment to observe its behavior. The email is typically held or the file is stripped pending analysis, rather than being delivered without inspection (Option A), immediately quarantined (Option B), or dropped outright (Option D), unless the analysis result triggers those actions.

Topics

#Cloud File Analysis#Advanced Malware Protection (AMP)#Cisco Secure Email Gateway#Malware Detection

Community Discussion

No community discussion yet for this question.

Full 300-720 Practice