In the default settings, which of the following sender groups will match on a reputation score of +2?

Question

Options

• ASUSPECTLIST
• BBLACKLIST
• CRELAYUST
• DUNKNOWNUST
• EWHITEUST

• B
  5% (1)
• D
  95% (19)

Explanation

UNKNOWNLIST (option D) matches a reputation score of +2 because, in Cisco ESA's default configuration, this sender group covers the mid-range Sender Base Reputation Scores (SBRS) - roughly -1.0 to +5.9 - representing senders of uncertain trustworthiness that still require content scanning before delivery.

Why the distractors are wrong:

• WHITELIST (E): Requires a high positive score (typically +6.0 to +10), so +2 doesn't meet the threshold.
• SUSPECTLIST (A): Targets senders with low negative scores (around -3.0 to -1.1), used for throttling - +2 is too positive.
• BLACKLIST (B): Reserved for the most negative scores (around -10.0 to -3.1), used to reject mail outright - +2 is far outside this range.
• RELAYLIST (C): Is not matched by reputation score at all; it identifies specific hosts permitted to relay mail through the appliance.

Memory tip: Think of the score ranges as a number line - BLACKLIST owns the bottom, SUSPECTLIST is the lower-middle, UNKNOWNLIST owns the neutral/slightly-positive middle (where +2 lives), and WHITELIST owns the top. If the score isn't clearly good or clearly bad, it's "unknown."

No community discussion yet for this question.