300-720 Question #29: Real Exam Question with Answer & Explanation

The correct answer is C: Message filters. On the Cisco ESA, LDAP group queries can be used within message filters, incoming mail policies, and content filters to apply per-group policy decisions.

Cisco ESA LDAP, Mail Policies, and Authentication

Question

Which three options are Cisco ESA facilities that can use LDAP group queries? (Choose three.)

Options

AAnti-spam settings
BSender groups
CMessage filters
DRAT
EIncoming mail policies
FContent filters
GDestination controls
HSenderBase reputation filtering

Explanation

On the Cisco ESA, LDAP group queries can be used within message filters, incoming mail policies, and content filters to apply per-group policy decisions.

Common mistakes.

A. Anti-spam settings are global or policy-level engine configurations and do not directly consume LDAP group query results for per-group rule application.
B. Sender groups in the HAT classify connecting IP addresses by reputation or network block, not by LDAP directory group membership.
D. The RAT controls accepted recipient domains and addresses at connection time and does not perform LDAP group queries.
G. Destination controls manage outbound delivery parameters per domain and do not use LDAP group queries.
H. SenderBase reputation filtering is a real-time IP reputation lookup that operates independently of internal LDAP directory queries.

Concept tested. Cisco ESA LDAP group query integration points

Reference. https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0/b_ESA_Admin_Guide_chapter_010111.html

Topics

#Cisco ESA#LDAP integration#Mail Policies#Content/Message Filters

Community Discussion

No community discussion yet for this question.

Full 300-720 Practice Browse All 300-720 Questions