nerdexam
Cisco

700-280 · Question #3

Which content cannot be blocked by content filters?

The correct answer is A. RSADLP failure. RSADLP (RSA Data Loss Prevention) failure represents a failure of the content filtering/DLP system itself - when the inspection engine fails, it physically cannot inspect or block anything. A broken filter by definition filters nothing; this is a system availability problem…

Describe Cisco Email Security Solutions

Question

Which content cannot be blocked by content filters?

Options

  • ARSADLP failure
  • BDKIM failure
  • CSPF failure
  • Dcredit card numbers

How the community answered

(50 responses)
  • A
    90% (45)
  • B
    2% (1)
  • C
    2% (1)
  • D
    6% (3)

Explanation

RSADLP (RSA Data Loss Prevention) failure represents a failure of the content filtering/DLP system itself - when the inspection engine fails, it physically cannot inspect or block anything. A broken filter by definition filters nothing; this is a system availability problem, not a content type that can be detected and acted upon.

Why B and C are wrong: Content filters can absolutely act on DKIM and SPF failure results. These are detectable authentication outcomes that filter rules can use to quarantine or reject messages - blocking email that fails these checks is standard configuration.

Why D is wrong: Detecting and blocking credit card numbers (PAN data) is one of the most common DLP content filter use cases. Pattern matching on 16-digit card number formats is a textbook content filter capability.

Memory tip: Ask yourself - "Is this something the filter sees, or is this the filter being blind?" DKIM failure, SPF failure, and credit card numbers are all things a working filter can detect and block. RSADLP failure means the filter itself is down, so there's no engine left to do the blocking.

Topics

#Email authentication#Content filtering limitations#DKIM/SPF/RSADLP#Mail gateway security

Community Discussion

No community discussion yet for this question.

Full 700-280 Practice