5.9 Cisco SMA for Centralized Content Security Management CCIE-SECURITY Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A company has multiple ESAs and WSAs deployed across its network. The security team wants to generate a single report that shows email and web threat activity across all appliances. Which SMA feature should be used?

   • ACentralized policy management
   • BCentralized quarantine management
   • CSMA high availability
   • DCentralized reporting and tracking
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company uses SMA to manage email security for multiple ESAs. The security team wants to allow the helpdesk to review and release quarantined emails that were flagged as spam, but the helpdesk should not be able to change email policies. What should the administrator configure on SMA?

   • AGive the helpdesk the 'Administrator' role
   • BCreate a custom role with quarantine management permissions only
   • CConfigure ESA to automatically release all quarantined emails
   • DGive the helpdesk the 'Read-Only' role
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security operations center (SOC) has three teams: email security, web security, and management. The SOC manager wants to ensure that each team can only view and manage the appliances relevant to their function. What should be configured on SMA?

   • AConfigure SMA to allow all users to access all features
   • BUse a single shared account for all SOC members
   • CCreate separate user roles for email, web, and management with appropriate permissions
   • DDisable SMA's web interface and use CLI only
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company relies on SMA for centralized reporting and quarantine management. To ensure continuous availability of these services, the administrator wants to deploy a second SMA that can take over if the primary fails. What should the administrator configure?

   • ASMA high availability with a standby unit
   • BSMA distributed deployment with multiple SMAs
   • CSMA centralized deployment with a single SMA
   • DSMA backup and restore procedures
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A global enterprise is deploying Cisco Email Security Appliances (ESAs) in three regional data centers to reduce email latency for local users. They also want a single pane of glass for policy management and to centralize the spam quarantine so that end users have one URL for releasing quarantined messages. Which SMA deployment mode should the architect choose?

   • ADistributed deployment with independent SMAs per region, no central aggregation
   • BCentralized deployment with a single SMA managing all ESAs
   • CDistributed deployment with an SMA in each region, all reporting to a central SMA
   • DCentralized deployment with one SMA for policy and quarantine, but using local SMAs for reporting
   Reveal Solution Discussion Select an answer first