Spreadsheets containing credit card numbers are being allowed to bypass the Cisco ESA. Which outgoing mail policy feature should be configured to catch this content before it leaves the network?

Question

Options

• Afile reputation filtering
• Boutbreak filtering
• Cdata loss prevention
• Dfile analysis

• A
  3% (2)
• B
  3% (2)
• C
  92% (59)
• D
  2% (1)

Explanation

Data Loss Prevention (DLP) is the ESA feature specifically designed to detect and block sensitive data - such as credit card numbers (governed by PCI-DSS) - from leaving the organization via email. DLP uses predefined and custom policies to inspect message content and attachments (including spreadsheets) for patterns matching sensitive data types. File reputation filtering (A) checks whether a file is known malware, not whether it contains sensitive data. Outbreak filtering (B) protects against emerging malware and phishing campaigns, not data exfiltration. File analysis (D) performs dynamic sandbox analysis of suspicious files for malware behavior, not content-based data inspection.

No community discussion yet for this question.