Exam 25: Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

An email containing a URL passes through the Cisco ESA that has content filtering disabled for all mail policies. The sender is sampleuser@test1.com, the recipients are testuser1@test2.com, testuser2@test2.com, testuser3@test2.com, and mailer1@test2.com. The subject of the email is Test Document395898847. An administrator wants to add a policy to ensure that the Cisco ESA evaluates the web reputation score before permitting this email. Which two criteria must be used by the administrator to achieve this? (Choose two.)

Which two factors must be considered when message filter processing is configured? (Choose two.)

Which feature utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco ESA?

A company has deployed a new mandate that requires all emails sent externally from the Sales Department to be scanned by DLP for PCI-DSS compliance. A new DLP policy has been created on the Cisco ESA and needs to be assigned to a mail policy named 'Sales' that has yet to be created. Which mail policy should be created to accomplish this task?

What are two prerequisites for implementing undesirable URL protection in Cisco ESA? (Choose two.)

What are two primary components of content filters? (Choose two.)

Which two components form the graymail management solution in Cisco ESA? (Choose two.)

What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?

An analyst creates a new content dictionary to use with Forged Email Detection. Which entry will be added into the dictionary?

When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?

Which action is a valid fallback when a client certificate is unavailable during SMTP authentication on Cisco ESA?

When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

What is the default HTTPS port when configuring spam quarantine on Cisco ESA?

What are two phases of the Cisco ESA email pipeline? (Choose two.)

Which scenario prevents a message from being sent to the quarantine as an action in the scan behavior on Cisco ESA?

Which antispam feature is utilized to give end users control to allow emails that are spam to be delivered to their inbox, overriding any spam verdict and action on the Cisco ESA?

Which two steps are needed to disable local spam quarantine before external quarantine is enabled? (Choose two.)

A recent engine update was pulled down for graymail and has caused the service to start crashing. It is critical to fix this as quickly as possible. What must be done to address this issue?

Which feature must be configured before an administrator can use the outbreak filter for nonviral threats?

Which feature must be enabled first when URL logging is configured on a Cisco ESA?