An administrator needs to configure Cisco ESA to ensure that emails are sent and authorized by the owner of the domain. Which two steps must be performed to accomplish this task? (Choose two.)
C and D are correct.
Sender Policy Framework (SPF) is a simple email validation system designed to detect email spoofing by providing a mechanism to allow receiving mail exchangers to check that incoming mail from a domain is being sent from a host authorized by that domain's administrators. The list of authorized sending hosts for a domain is published in the Domain Name System (DNS) records for that domain in the form of a specially formatted TXT record. Email spam and phishing often use forged sender addresses, so publishing and checking SPF records can be considered anti-spam techniques.
ttps://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117973-faq-esa-00.html
A. Generate keys.
E. Create DMARC profile.
To ensure that emails are sent and authorized by the owner of the domain, the following steps must be performed on Cisco ESA:
A. Generate keys: Generate DomainKeys Identified Mail (DKIM) keys. DKIM is an email authentication method that allows the recipient to verify that an email was indeed sent by the domain it claims to be from.
E. Create DMARC profile: DMARC (Domain-based Message Authentication, Reporting, and Conformance) is a policy framework that builds upon SPF and DKIM to provide additional email authentication and reporting capabilities. By creating a DMARC profile, the administrator can define the desired policy for handling emails that fail SPF or DKIM checks and specify how receiving mail servers should handle such emails.
These steps, generating keys and creating a DMARC profile, contribute to ensuring that emails are sent and authorized by the domain owner, providing improved email authentication and verification mechanisms.
Correct.
SPF and SIDF allow the owner of an Internet domain to use a special format of DNS TXT records to specify which machines are authorized to transmit email for that domain.
DMARC standardizes how email receivers perform email authentication using SPF and DKIM mechanisms.
DMARC Verification Workflow:
-A listener configured on AsyncOS receives an SMTP connection.
-AsyncOS performs SPF and DKIM verification on the message.
-AsyncOS fetches the DMARC record for the sender’s domain from the DNS.
-If no record is found, AsyncOS skips the DMARC verification and continues processing.
-If the DNS lookup fails, AsyncOS takes action based on the specified DMARC verification profile.
-Depending on DKIM and SPF verification results, AsyncOS performs DMARC verification on the message.
https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0/b_ESA_Admin_Guide_12_1_chapter_010110.html?bookSearch=true#con_1148397
This section is not available anymore. Please use the main Exam Page.300-720 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Vilsenil
3 months agoGVKD
10 months, 1 week agoGVKD
10 months, 1 week agohakimbenda
10 months, 2 weeks agoGVKD
10 months, 3 weeks agoGVKD
10 months, 3 weeks agoGVKD
10 months, 3 weeks ago