300-720 · Question #72
To comply with a recent audit, an engineer must configure anti-virus message handling options on the incoming mail policies to attach warnings to the subject of an email. What should be configured…
The correct answer is A. Virus Infected Messages. In Cisco ESA's anti-virus message handling configuration within incoming mail policies, 'Virus Infected Messages' (Option A) is the category that covers emails definitively identified as containing a known virus by the scanning engine. This category allows administrators to…
Question
To comply with a recent audit, an engineer must configure anti-virus message handling options on the incoming mail policies to attach warnings to the subject of an email. What should be configured to meet this requirement for known viral emails?
Options
- AVirus Infected Messages
- BUnscannable Messages
- CEncrypted Messages
- DPositively Identified Messages
How the community answered
(20 responses)- A95% (19)
- B5% (1)
Explanation
In Cisco ESA's anti-virus message handling configuration within incoming mail policies, 'Virus Infected Messages' (Option A) is the category that covers emails definitively identified as containing a known virus by the scanning engine. This category allows administrators to configure actions such as modifying the subject line with a warning (e.g., prepending '[VIRUS]' to the subject). 'Positively Identified Messages' (Option D) refers to messages with an even higher certainty of infection and typically triggers more aggressive actions like dropping or quarantining. 'Unscannable Messages' (Option B) covers emails the engine could not scan (e.g., corrupt archives). 'Encrypted Messages' (Option C) covers messages the engine cannot decrypt to scan. For known viral content requiring subject-line warnings, the 'Virus Infected Messages' handling option is the correct configuration target.
Topics
Community Discussion
No community discussion yet for this question.