nerdexam
Cisco

300-720 · Question #83

Refer to the exhibit. An engineer needs to change the existing Forged Email Detection message filter so that it references a newly created dictionary named `Executives'. What should be done to…

The correct answer is D. Change "support" to "Executives". In a Cisco ESA Forged Email Detection message filter, the dictionary name argument within the filter condition must be updated to reference the newly created dictionary.

Content and Message filters

Question

Refer to the exhibit. An engineer needs to change the existing Forged Email Detection message filter so that it references a newly created dictionary named `Executives'. What should be done to accomplish this task?

Options

  • AChange "from" to "Executives".
  • BChange "TESF to "Executives".
  • CChange fed' to "Executives".
  • DChange "support" to "Executives".

How the community answered

(29 responses)
  • A
    3% (1)
  • B
    10% (3)
  • C
    7% (2)
  • D
    79% (23)

Why each option

In a Cisco ESA Forged Email Detection message filter, the dictionary name argument within the filter condition must be updated to reference the newly created dictionary.

AChange "from" to "Executives".

The 'from' keyword is the standard message filter header condition operator used to target the From header field and is not the replaceable dictionary name argument.

BChange "TESF to "Executives".

The label such as 'TESF' identifies the filter rule itself within the filter set and is not the dictionary name parameter embedded in the filter condition.

CChange fed' to "Executives".

The term 'fed' represents the forged-email-detection condition function name in the message filter syntax and is not the dictionary argument that can be swapped to reference a different dictionary.

DChange "support" to "Executives".Correct

The Forged Email Detection filter condition includes a named dictionary argument (in this case 'support') that specifies which dictionary the ESA uses to compare friendly-name display names in the From header - changing 'support' to 'Executives' redirects the filter to evaluate senders against the newly created 'Executives' dictionary.

Concept tested: Cisco ESA Forged Email Detection filter dictionary argument

Source: https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0.html

Topics

#Message Filters#Dictionaries#Forged Email Detection#Cisco ESA

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 300-720 Practice