Which of the following is true about Outbound Malware Scanning?

Question

Options

• AIt has its own policy table.
• BIt is configured as part of Access Policies.
• CIt is configured as part ofIronPort data Security.
• DIt only has global configuration.

• A
  3% (1)
• B
  92% (33)
• D
  6% (2)

Explanation

Outbound Malware Scanning is integrated directly into Access Policies on the Cisco Web Security Appliance (WSA), where administrators configure it per policy group to scan upload traffic for malicious content - making B correct.

Why the distractors are wrong:

• A is incorrect because Outbound Malware Scanning does not have its own dedicated policy table; it is a feature within the existing Access Policy framework, not a standalone policy type.
• C is incorrect because IronPort Data Security (DLP) is a separate policy category focused on preventing sensitive data exfiltration - it is not the home for malware scanning configuration.
• D is incorrect because the feature can be applied granularly at the Access Policy level per user group or identity, not solely at a global level.

Memory tip: Think "outbound = access" - just as Access Policies control what users can access outbound on the web, Outbound Malware Scanning lives there too. If it were about data leakage/classification, that would be Data Security; if it were about inbound threats, think Anti-Malware under different settings. The word "outbound" paired with "malware" = Access Policies.

No community discussion yet for this question.