nerdexam
Cisco

700-765 · Question #24

Which feature of E-mail Security protects users from virus outbreaks using the Tabs database to quarantine suspicious messages?

The correct answer is B. Outbreak fitters. Cisco Email Security Outbreak Filters use the Talos real-time threat intelligence database to detect and quarantine suspicious messages during active outbreak events before antivirus signatures are available.

Cisco Security Product Solutions

Question

Which feature of E-mail Security protects users from virus outbreaks using the Tabs database to quarantine suspicious messages?

Options

  • AAntivirus defense
  • BOutbreak fitters
  • CData Loss Prevention
  • DAdvanced Malware Protection

How the community answered

(47 responses)
  • A
    2% (1)
  • B
    89% (42)
  • C
    2% (1)
  • D
    6% (3)

Why each option

Cisco Email Security Outbreak Filters use the Talos real-time threat intelligence database to detect and quarantine suspicious messages during active outbreak events before antivirus signatures are available.

AAntivirus defense

Antivirus defense performs signature-based scanning against known malware definitions but does not use outbreak intelligence to quarantine messages during emerging, pre-signature outbreaks.

BOutbreak fittersCorrect

Outbreak Filters leverage Cisco Talos outbreak intelligence rules - referenced as the 'Tabs database' in the question - to identify and quarantine messages that match active outbreak patterns, providing protection during the window between outbreak emergence and signature release. This proactive quarantine approach is distinct from traditional signature-based scanning and is the specific feature designed for real-time outbreak response on the Cisco Email Security Appliance.

CData Loss Prevention

Data Loss Prevention inspects outbound email for sensitive content such as PII or financial data to prevent data exfiltration, which is unrelated to inbound virus outbreak detection.

DAdvanced Malware Protection

Advanced Malware Protection provides deep file analysis and sandboxing for attachment-based threats but operates independently from the Outbreak Filters quarantine mechanism that uses Talos outbreak rules.

Concept tested: Cisco Email Security Outbreak Filters and Talos intelligence

Source: https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0/b_ESA_Admin_Guide_12_1_chapter_010111.html

Topics

#email security#outbreak filters#quarantine#antivirus

Community Discussion

No community discussion yet for this question.

Full 700-765 Practice