300-720 Question #85: Real Exam Question with Answer & Explanation

Question

A company has deployed a new mandate that requires all emails sent externally from the Sales Department to be scanned by DLP for PCI-DSS compliance. A new DLP policy has been created on the Cisco ESA and needs to be assigned to a mail policy named `Sales' that has yet to be created. Which mail policy should be created to accomplish this task?

Options

• AOutgoing Mail Policy
• BPreliminary Mail Policy
• CIncoming Mail Flow Policy
• DOutgoing Mail Flow Policy

Explanation

{"question_number": 6, "question": "A company has deployed a new mandate that requires all emails sent externally from the Sales Department to be scanned by DLP for PCI-DSS compliance. A new DLP policy has been created on the Cisco ESA and needs to be assigned to a mail policy named 'Sales' that has yet to be created. Which mail policy should be created to accomplish this task?", "correct_answer": "A", "explanation": "On the Cisco ESA, mail policies are divided into Incoming and Outgoing. DLP (Data Loss Prevention) scanning is only available on Outgoing Mail Policies because its purpose is to prevent sensitive data from leaving the organization. Since the requirement is to scan emails sent externally from the Sales Department, an Outgoing Mail Policy named 'Sales' must be created and the DLP policy assigned to it. 'Preliminary Mail Policy' (B) and 'Outgoing Mail Flow Policy' (D) are not valid Cisco ESA policy types. 'Incoming Mail Flow Policy' (C) controls inbound connection behavior (rate limiting, spam thresholds, etc.) and does not support DLP scanning.", "generated_by": "claude-sonnet", "llm_judge_score": 3}

No community discussion yet for this question.