350-701 · Question #399
An engineer is configuring Cisco Secure Email Gateway and needs to enable a separated email transfer flow from the Internet and from the LAN. Which deployment mode must be used to accomplish this…
The correct answer is D. two-interface. To enable a separated email transfer flow from the Internet and the LAN on a Cisco Secure Email Gateway, the two-interface deployment mode must be used.
Question
An engineer is configuring Cisco Secure Email Gateway and needs to enable a separated email transfer flow from the Internet and from the LAN. Which deployment mode must be used to accomplish this goal?
Options
- Asingle interface
- Bmulti-context
- Ctransparent
- Dtwo-interface
How the community answered
(29 responses)- A3% (1)
- B17% (5)
- C7% (2)
- D72% (21)
Why each option
To enable a separated email transfer flow from the Internet and the LAN on a Cisco Secure Email Gateway, the two-interface deployment mode must be used.
Single interface mode processes both external and internal email traffic through a single network interface, which does not provide a separated email transfer flow.
Multi-context mode is a feature found in firewalls (like Cisco ASA) that allows multiple virtual firewalls to run on a single physical device, not a deployment mode for an email gateway to separate mail flows.
Transparent mode, often used for firewalls, allows a device to operate without an IP address in the network path, but it does not specifically define how an email gateway separates internet and LAN mail flows as 'two-interface' mode does.
In a two-interface deployment mode for the Cisco Secure Email Gateway, one network interface is dedicated to handling external (Internet-facing) email traffic, while the second interface handles internal (LAN-facing) email traffic, allowing for distinct security policies, scanning, and routing rules to be applied to each flow.
Concept tested: Cisco Email Gateway deployment modes
Source: https://www.cisco.com/c/en/us/products/security/email-security/index.html
Topics
Community Discussion
No community discussion yet for this question.