nerdexam
Cisco

300-720 · Question #28

Which two options describe the expected results when centralized policy, virus, and outbreak quarantines are disabled on the Cisco Email Security Appliance? (Choose two.)

The correct answer is B. New messages sent to the quarantine are immediately sent to local quarantines D. Local quarantines are enabled automatically. Disabling centralized quarantines on the ESA causes the appliance to automatically re-enable its local quarantines and immediately route new quarantined messages to them.

System Quarantines and Delivery Methods

Question

Which two options describe the expected results when centralized policy, virus, and outbreak quarantines are disabled on the Cisco Email Security Appliance? (Choose two.)

Options

  • AThe Cisco ESA must be rebooted.
  • BNew messages sent to the quarantine are immediately sent to local quarantines
  • CThe Cisco ESA stops accepting new messages.
  • DLocal quarantines are enabled automatically.
  • EThe quarantine process must be restarted.

How the community answered

(35 responses)
  • B
    91% (32)
  • C
    3% (1)
  • E
    6% (2)

Why each option

Disabling centralized quarantines on the ESA causes the appliance to automatically re-enable its local quarantines and immediately route new quarantined messages to them.

AThe Cisco ESA must be rebooted.

A reboot is not required when disabling centralized quarantines; the change takes effect without restarting the appliance.

BNew messages sent to the quarantine are immediately sent to local quarantinesCorrect

When centralized quarantines are disabled, any message that would have been sent to the SMA quarantine is instead routed to the corresponding local quarantine on the ESA immediately, without interruption to mail flow.

CThe Cisco ESA stops accepting new messages.

The ESA continues accepting new messages normally; disabling centralized quarantines only changes where quarantined messages are stored, not whether mail is accepted.

DLocal quarantines are enabled automatically.Correct

Disabling centralized quarantines triggers the ESA to automatically re-enable local quarantines, ensuring a quarantine destination is always available for policy-matched messages.

EThe quarantine process must be restarted.

The quarantine process does not need to be manually restarted; the ESA handles the transition to local quarantines automatically as part of the configuration change.

Concept tested: Cisco ESA centralized vs. local quarantine failover behavior

Source: https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0/b_ESA_Admin_Guide_chapter_0100111.html

Topics

#Cisco ESA Quarantines#Centralized Quarantines#Local Quarantines#Quarantine Configuration

Community Discussion

No community discussion yet for this question.

Full 300-720 Practice