700-280 · Question #77
Membership in which sender group will cause the C-Series to skip checking the SMTP envelope's "rcpt to" field against the RAT?
The correct answer is A. RELAYLIST. Membership in RELAYLIST causes the Cisco C-Series ESA to skip the RAT check because hosts in this group are trusted internal relays. Since relay hosts forward mail to arbitrary destinations (including external domains not owned by your organization), enforcing the RAT against…
Question
Membership in which sender group will cause the C-Series to skip checking the SMTP envelope's "rcpt to" field against the RAT?
Options
- ARELAYLIST
- BWHITELIST
- CBLACKLIST
- DSUSPECTLIST
- EUNKNOWNLIST
How the community answered
(23 responses)- A87% (20)
- D4% (1)
- E9% (2)
Explanation
Membership in RELAYLIST causes the Cisco C-Series ESA to skip the RAT check because hosts in this group are trusted internal relays. Since relay hosts forward mail to arbitrary destinations (including external domains not owned by your organization), enforcing the RAT against them would incorrectly block legitimate mail flow - so the appliance deliberately bypasses that check for them.
The distractors are wrong for these reasons:
- WHITELIST (B): Receives lenient mail flow policies (e.g., no rate limiting, spam scanning relaxed), but still has its recipients validated against the RAT - it's "trusted," not "relay-trusted."
- BLACKLIST (C): Connections are rejected outright; the RAT is never even reached.
- SUSPECTLIST (D): Gets throttled/rate-limited treatment; RAT checking still applies.
- UNKNOWNLIST (E): The default bucket for unclassified senders; standard processing including RAT checking applies.
Memory tip: Think "RELAY = routes mail out on your behalf" - it logically can't be bound by a table of your local recipients. The function of the group tells you why the RAT exception must exist.
Topics
Community Discussion
No community discussion yet for this question.