Exam 350-701 topic 1 question 223 discussion

B. Provision the email appliance Provisioning the email appliance, also known as an Email Security Gateway or Email Security Appliance, is a solution for protecting data in transit and adding headers to email messages. The email appliance acts as a security layer between the email servers and the Internet, and provides a range of security features such as encryption, anti-virus, anti-spam, and content filtering. These features help to ensure that emails are transmitted securely, and help to prevent unauthorized access to sensitive information. By provisioning the email appliance, the engineer can add protection for data in transit and have headers in the email message.

Terrible question by Cisco, but let's get to facts: Encryption Appliances are out of support for almost a decade (were made EoS in 2015). Deploying the Email Appliance allows you to add protection for data in transit as you can encrypt the conversation with TLS and/or even encrypt the data itself with S/MIME. Also, using Content Filtering and other features you are able to add/edit Headers. Therefore I would go with B.

I Think it is A

I'd say B more than A, but who knows. Again another ambiguous exam question, to prove one knows Cisco Security knowledge..

After doing more research I will change my answer to A. To add protection for data in transit and have headers in the email message, an engineer needs to deploy an encryption appliance. This is discussed on page 1 of the Cisco Email Encryption PDF guide under the section "How to Encrypt Messages with a Local Key Server" and on page 11 under "Inserting Encryption Headers into Messages". Therefore, the correct answer is A. Deploy an encryption appliance. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-0/user_guide_fs/b_ESA_Admin_Guide_11_0/b_ESA_Admin_Guide_chapter_010010.pdf

It's B. To add protection for data in transit and have headers in the email message, you need to insert encryption headers into messages using either a content filter or a message filter. The encryption header can override the encryption settings defined in the associated encryption profile, and it can apply specified encryption features to messages. Therefore, option B (provision the email appliance) is needed to accomplish this goal. Option A (deploy an encryption appliance) may also be necessary depending on your organization's needs. Options C (map sender IP addresses to a host interface) and D (enable flagged message handling) are not directly related to this goal.

Correct B

The encryption header can override the encryption settings defined in the associated encryption profile, and it can apply specified encryption features to messages.

I prefer A

AsyncOS supports using encryption to secure inbound and outbound email. To use this feature, you create an encryption profile that specifies characteristics of the encrypted message and connectivity information for the key server. The key server may either be: The Cisco Registered Envelope Service (managed service ), or An Cisco Encryption appliance (locally managed server) 😜it should b (A) as to locally manage one must first deploy it.

A is correct. WSA: " AsyncOS enables you to add encryption settings to a message by inserting an SMTP HEADER into a message using either a content filter or a message filter. The encryption header can override the encryption settings defined in the associated encryption profile, and it can apply specified encryption features to messages. NOTE: The Cisco Ironport ENCRYPTION APPLIANCE must be set up to handle flagged messages." As question states that headers are already in the email messages, we need only Encryption Appliance to do its work. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-0/user_guide_fs/b_ESA_Admin_Guide_11_0/b_ESA_Admin_Guide_chapter_010010.html#task_1146822