Cisco ESA Message Filters: Action Types & Functions | Exam 300-720-SESA

Action Types Performed by Cisco ESA Message Filters

Question

Which two action types are performed by Cisco ESA message filters? (Choose two.)

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E.

AD.

https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html

Cisco Email Security Appliance (ESA) is an email security solution that provides protection against email threats, including spam, viruses, and malware. Cisco ESA message filters are a key component of the solution and are responsible for analyzing incoming email messages and determining what actions to take based on defined policies.

To answer the question, two action types performed by Cisco ESA message filters are:

B. Filter Actions: Filter actions are the primary actions taken by message filters. These actions allow the filters to evaluate incoming email messages against predefined rules and policies and decide whether to allow, block, or redirect the message. Filter actions include:

  • Accept: Allows the message to pass through to the recipient.
  • Drop: Blocks the message without notifying the sender.
  • Bounce: Sends a notification back to the sender that the message was rejected.
  • Redirect: Sends the message to another location or email address.
  • Modify: Changes specific elements of the message, such as the subject line or message body.

D. Final Actions: Final actions are the last actions taken by message filters, and they determine what happens to the message after all other actions have been completed. Final actions include:

  • Deliver: Sends the message to the recipient's inbox.
  • Drop: Blocks the message without notifying the sender.
  • Bounce: Sends a notification back to the sender that the message was rejected.
  • Quarantine: Holds the message in a quarantine area for further review.

A. Non-final actions are not actual actions taken by the message filters, but rather the result of the evaluation of the filter rules. Non-final actions are used to determine the outcome of a message and what final action to take, such as to allow or block the message.

C. Discard actions are not an actual action type in Cisco ESA message filters. Instead, the drop action is used to block messages without notifying the sender.

E. Quarantine actions are a type of final action that holds messages in a quarantine area for further review. Quarantine actions are covered under final actions, which are one of the two types of actions performed by Cisco ESA message filters.