The customer has a switch on their DMZ (one VLAN). They desire to have separate policies, rules and filters for incoming and outgoing message, and management to one IP address on the C- Series…

Question

Options

• AData 1 and Data 2 interfaces, each with one listener
• BData 2 interface with two listeners
• CData 1 interface with two listeners
• DData 1 interface with one listener

• A
  3% (1)
• B
  7% (2)
• C
  77% (23)
• D
  13% (4)

Explanation

Option C is correct because the single DMZ VLAN means only one physical interface needs to be connected - but separate inbound and outbound email policies each require their own listener, so two listeners on that one interface satisfies both requirements simultaneously.

Why the distractors fail:

• A (Data 1 + Data 2, one listener each) uses two interfaces, but there is only one VLAN - connecting two interfaces to the same flat network is unnecessary and creates routing/management complications.
• B (Data 2 with two listeners) has the right listener count but uses Data 2; on Cisco C-Series ESA, Data 1 is the primary/preferred data interface and the conventional choice when only one interface is deployed.
• D (Data 1, one listener) is on the right interface but a single listener cannot enforce separate policies for incoming versus outgoing traffic.

Memory tip: Think "1 VLAN → 1 Interface, 2 Directions → 2 Listeners." The number of interfaces maps to the number of network segments, and the number of listeners maps to the number of traffic directions requiring distinct policy control.

No community discussion yet for this question.