300-720 · Question #81
An email containing a URL passes through the Cisco ESA that has content filtering disabled for all mail policies. The sender is [email protected], the recipients are [email protected]…
The correct answer is B. Sender matches test1.com C. Email body contains a URL. To trigger web reputation scoring on a specific email flow, the content filter policy must identify the traffic uniquely and have something to evaluate. Option B (Sender matches test1.com) identifies the sender domain, which scopes the policy to the correct mail stream. Option…
Question
An email containing a URL passes through the Cisco ESA that has content filtering disabled for all mail policies. The sender is [email protected], the recipients are [email protected], [email protected], [email protected], and [email protected]. The subject of the email is Test Document395898847. An administrator wants to add a policy to ensure that the Cisco ESA evaluates the web reputation score before permitting this email. Which two criteria must be used by the administrator to achieve this? (Choose two.)
Options
- ASubject contains Test Document"
- BSender matches test1.com
- CEmail body contains a URL
- DDate and time of email
- EEmail does not match [email protected]
How the community answered
(45 responses)- A4% (2)
- B82% (37)
- D2% (1)
- E11% (5)
Explanation
To trigger web reputation scoring on a specific email flow, the content filter policy must identify the traffic uniquely and have something to evaluate. Option B (Sender matches test1.com) identifies the sender domain, which scopes the policy to the correct mail stream. Option C (Email body contains a URL) is the prerequisite condition for web reputation scoring - without a URL present, there is nothing to score. Option A (Subject) is too specific to a single message and not a reliable policy criterion. Option D (Date/time) is irrelevant to URL reputation evaluation. Option E (Email does not match [email protected]) is a negative recipient match that does not logically define when to inspect URLs. Together, B and C define both the source of the traffic and the presence of the content that must be scanned.
Topics
Community Discussion
No community discussion yet for this question.