Your customer is using the encryption plug-in for Microsoft Outlook. Which content filter condition is used to match on the tag that is set by the plug-in?

Question

Options

• AEnvelope sender
• BOther header
• CAttachment content
• DMessage body
• ESubject header

• B
  73% (19)
• C
  15% (4)
• D
  4% (1)
• E
  8% (2)

Explanation

Option B (Other header) is correct because the Microsoft Outlook encryption plug-in inserts a custom X-header tag into outgoing messages - for example, X-Encrypt: true. Content filter policies on email security gateways (such as Cisco ESA) use the Other header condition to match on non-standard, custom, or X-headers that don't have a dedicated built-in filter field.

Why the distractors are wrong:

• A (Envelope sender) matches the SMTP MAIL FROM address - it has nothing to do with plug-in-generated tags.
• C (Attachment content) scans file attachments for keywords or patterns, not header metadata.
• D (Message body) searches the email's visible text content, not header fields.
• E (Subject header) is a dedicated condition for the Subject: field only; the plug-in writes to a custom header, not the subject line.

Memory tip: Think of "Other header" as the catch-all for anything that isn't a standard named field. If a plug-in or third-party tool stamps a custom X-Something: header, it will never match Envelope Sender, Subject, Body, or Attachment - it can only match Other header.

No community discussion yet for this question.