300-720 practice question 9 of 25

An engineer must provide differentiated email filtering to executives within the organization Which two actions must be taken to accomplish this task? (Choose two)

Full set: 147 questions
Answer options
A: Define an LDAP group query to specify users to whom the mail policy rules apply. Correct answer
B: Create content filters for actions to take on messages that contain specific data Correct answer
C: Upload a csv file containing the email addresses for the users for whom you want to create mail policies.
D: Enable the content-scanning features you want to use with mail policies
E: Define the default mail policies for incoming or outgoing messages
Correct Answer:
A. Define an LDAP group query to specify users to whom the mail policy rules apply.; B. Create content filters for actions to take on messages that contain specific data
Explanation

To provide differentiated email filtering for a specific group like executives, an administrator must perform two primary actions on a Cisco Email Security Appliance (ESA). First, the target group ("executives") must be identified and defined. Using an LDAP group query (A) is a standard, dynamic, and scalable method to create a recipient group based on an existing directory structure (e.g., Active Directory). Second, the specific filtering rules and corresponding actions (e.g., quarantine, drop, notify) must be created. This is accomplished by creating content filters (B) that inspect message attributes. These two components—the user group and the content filter—are then applied to a dedicated mail policy.

Why Incorrect

C: While uploading a CSV file is a valid method to create a user list, an LDAP query is a more robust and dynamic enterprise solution for managing group membership. D: Enabling content-scanning features is a global, prerequisite system configuration. It is not a direct step in creating a specific, differentiated mail policy for a particular user group. E: Defining default mail policies creates a baseline for all users. The task requires creating a specific, non-default policy that applies only to the executive group, which typically precedes the default policy.

References

1. Cisco Secure Email and Web Manager 15.0 Configuration Guide:

For Answer A: In the chapter "System Administration

" the section "LDAP" describes how to configure LDAP profiles and queries. Specifically

the subsection "Using LDAP Group Queries to Populate Recipient Groups" details how to create recipient groups based on LDAP directory group queries

which is the action described in option A.

For Answer B: In the chapter "Mail Policies

" the section "Content Filters" explains their function: "Content filters are rules you can create to take action on messages based on their contents...". This directly supports creating specific rules as described in option B.

General Workflow: The chapter "Mail Policies

" section "Configuring Mail Policies

" outlines the process of creating a new mail policy and associating it with specific user groups (defined via LDAP or other means) and content filters. This confirms that actions A and B are the core steps.

Scroll to Top