300-720 · Question #94
An engineer is configuring an SMTP authentication profile on a Cisco ESA which requires certificate verification. Which section must be configured to accomplish this goal?
The correct answer is A. Mail Flow Policies. On the Cisco ESA, SMTP authentication settings including certificate verification are configured inside Mail Flow Policies, which define the SMTP session behavior applied to senders matched by Host Access Table sender groups.
Question
An engineer is configuring an SMTP authentication profile on a Cisco ESA which requires certificate verification. Which section must be configured to accomplish this goal?
Options
- AMail Flow Policies
- BSending Profiles
- COutgoing Mail Policies
- DVerification Profiles
How the community answered
(22 responses)- A77% (17)
- B5% (1)
- C5% (1)
- D14% (3)
Why each option
On the Cisco ESA, SMTP authentication settings including certificate verification are configured inside Mail Flow Policies, which define the SMTP session behavior applied to senders matched by Host Access Table sender groups.
Mail Flow Policies on the Cisco ESA control the SMTP conversation parameters for each HAT sender group, including TLS encryption mode, SMTP AUTH enablement, and the requirement for certificate verification - making them the correct and only standard location to configure certificate-based SMTP authentication for inbound connections.
Sending Profiles relate to outbound SMTP delivery configuration such as TLS preferences for outgoing connections to remote mail servers, not to inbound SMTP authentication requirements.
Outgoing Mail Policies define content and security filtering rules applied to outbound messages from internal senders and do not contain SMTP session-level authentication protocol settings.
'Verification Profiles' is not a standard section within the Cisco ESA configuration interface - certificate verification for SMTP authentication is controlled exclusively through Mail Flow Policy settings.
Concept tested: Cisco ESA Mail Flow Policy SMTP AUTH certificate verification
Source: https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0.html
Topics
Community Discussion
No community discussion yet for this question.