Exam 350-701 topic 1 question 201 discussion

I'm not really sure about the answer, but it could be B "The appliance will try once to upload the file; if upload is not successful, for example because of connectivity problems, the file may not be uploaded. If the failure was because the file analysis server was overloaded, the upload will be attempted once more.' https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118796-technote-esa-00.html

its B "The appliance will try once to upload the file; if upload is not successful, for example because of connectivity problems, the file may not be uploaded. If the failure was because the file analysis server was overloaded, the upload will be attempted once more." https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118796-technote-esa-00.html

The network is congested in this case so that means connectivity problems are occurring and so as many people have wrote but not emphasized. Theresa will drop the file and not upload it again because of connectivity issues.

The correct answer to me even is D. The first part of the question is just noise to distract. The emphasis to me is the second half of the question - How will Cisco ESA handle any files which need analysis? The Cisco ESA will not abandon the file upload. Instead, it will continue to attempt to upload the file until communication is restored. If the file is still not uploaded after a certain period of time, the Cisco ESA will cache the file and continue to attempt to upload it periodically https://bard.google.com/chat/e3b8e30fe3160083

There is a video from a Cisco engineer. https://youtu.be/WD7UD70e2mo?t=453 I believe the answer is B.

Read this : https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118796-technote-esa-00.html#anc5 Highlighting important notes: If a file has recently been uploaded from any source, the file will not be uploaded again. For file analysis results for this file, search for the SHA-256 from the File Analysis reporting page. The appliance will try once to upload the file; if upload is not successful, for example because of connectivity problems, the file may not be uploaded. If the failure was because the file analysis server was overloaded, the upload will be attempted once more.

The appliance will try once to upload the file; if upload is not successful, for example because of connectivity problems, the file may not be uploaded. If the failure was because the file analysis server was overloaded, the upload will be attempted once more

The AMP first tries to compare file's hash to the cloud DB and if there is no such file it tries to upload it. It will retry if the upload fails.

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118796-technote-esa-00.html

its B the question clearly states that "The network is congested and is affecting communication." & its mentioned in ESA configuration guide "The appliance will try once to upload the file; if upload is not successful, for example because of connectivity problems, the file may not be uploaded." https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118796-technote-esa-00.html

Cisco ESA adds a record of the SHA256 of this file to its internal database, where it is kept for up to 12 hours, and starts periodically querying if the analysis was complete, until it receives a positive response back from the file analysis service i think C

I actually believe the answer is D. I got it from Cisco website, here is the paragraph “The appliance will try once to upload the file; if upload is not successful, for example because of connectivity problems, the file may not be uploaded. If the failure was because the file analysis server was overloaded, the upload will be attempted once more.“ Please feel free to correct me if you think it’s not. This is the link: You will find it as the second point where they say Highly Important Notes: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118796-technote-esa-00.html#anc1

There is NO (Zero) file upload, only a hash exchange making answer C the only correct answer.

What about A. Highlighting important notes: If a file has recently been uploaded from any source, the file will not be uploaded again. For file analysis results for this file, search for the SHA-256 from the File Analysis reporting page. The appliance will try once to upload the file; if upload is not successful, for example because of connectivity problems, the file may not be uploaded. If the failure was because the file analysis server was overloaded, the upload will be attempted once more.