350-701 Question #410: Real Exam Question with Answer & Explanation

Question

An engineer is implementing Cisco CES in an existing Microsoft Office 365 environment and must route inbound email to Cisco CES addresses. Which DNS record must be modified to accomplish this task?

Options

• ACNAME
• BMX
• CSPF
• DDKIM

Explanation

MX (Mail Exchanger) records control where inbound email is delivered by pointing a domain's mail flow to a specific mail server - so when integrating Cisco CES as an email security gateway, the MX record must be updated to point to Cisco CES's inbound mail servers instead of Office 365 directly, forcing all inbound traffic through CES for filtering before it reaches the mailbox.

Why the distractors are wrong:

• CNAME is an alias record that maps one hostname to another; it has no role in directing email flow.
• SPF is a TXT record that specifies which servers are authorized to send email on behalf of your domain - it affects outbound sender verification, not inbound routing.
• DKIM is also related to outbound email authentication via cryptographic signatures; it validates message integrity but does not control where mail is delivered.

Memory tip: Think "MX = Mail eXchange = where mail goes." Any time a question asks about routing inbound email to a new service (spam filter, email gateway, cloud security), the answer is almost always MX - it's the DNS record that acts as the "front door" for incoming mail.

No community discussion yet for this question.