Exam 300-720 topic 1 question 5 discussion

The Question is about 'Key Types' and not the Keys Used so correct answer is DKIM and DomainKeys. DomainKeys: This key type uses public key cryptography to sign emails, allowing the recipient to verify that the email was indeed sent by the domain it claims to be from. DKIM: Similar to DomainKeys, DKIM also uses public key cryptography but includes additional features for better security and flexibility. It allows the sender to sign the email with a private key, and the recipient can verify the signature using the corresponding public key published in the DNS2. These key types of help ensure the authenticity and integrity of the emails sent from your domain.

Correct

When configuring the ESA under Mail Policy > Sending Profile, the two "Domain Key Type:" are DKIM and Domain Keys

B & E are Correct. With DomainKeys or DKIM email authentication, the sender signs the email using public key cryptography. Configuring DomainKeys and DKIM Signing A signing key is the private key stored on the appliance. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_010101.html?bookSearch=true

Private and Public keys

it's DKIM/Domain Keys, asking about the signing profile here specifically.

DomainKeys and DKIM signing works like this: a domain owner generates two keys — a public key stored in the public DNS (a DNS TXT record associated with that domain) and a private key that is stored on the appliance is used to sign mail that is sent (mail that originates) from that domain.

asking which keys, for this needed private and public keys

answer is correct, when adding domain signing profile options for Domain Key type is DKIM or Domain Keys

Domain Key/DKIM is the same.