Exam 300-720 topic 1 question 138 discussion

Actual exam question from Cisco's 300-720

Question #: 138
Topic #: 1

Refer to the exhibit. A network engineer must set up a content filter to find any messages that failed SPF and send them into quarantine. The content filter has been set up and enabled, but all messages except those that have failed SPF are being sent into quarantine. Which section of the filter must be modified to correct this behavior?

A. log-entry
B. quarantine
C. spf-status
D. skip-filters

Show Suggested Answer

Suggested Answer: C 🗳️

by GVKD at June 25, 2023, 9:25 p.m.

Comments

Submit Cancel

GVKD

11 months ago

Selected Answer: C

Correct. You can check against the SPF/SIDF verification results using the following syntax: if (spf-status == "Pass") If you want a single condition to check against multiple status verdicts, you can use the following syntax: if (spf-status == "PermError, TempError") You can also check the verification results against the HELO, MAIL FROM, and PRA identities using the following syntax: if (spf-status("pra") == "Fail") https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0/b_ESA_Admin_Guide_12_1_chapter_01000.html?bookSearch=true#con_1132105

upvoted 3 times

...