5.7 Email Security Features CCIE-SECURITY Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A company wants to implement email authentication to prevent spoofing. They have a complex environment with multiple third-party senders (e.g., marketing emails) that send on behalf of their domain. They need to ensure that legitimate third-party emails are not rejected while still protecting against spoofing. What is the best strategy?

   • AEncrypt all outbound email to prevent spoofing.
   • BImplement SPF and DKIM for all sending sources, then use DMARC with p=quarantine initially and gradually move to p=reject.
   • CRely on SPF only, as it is simpler.
   • DUse DMARC with p=reject immediately to block all unauthenticated emails.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A global company needs to encrypt email communications with partners who use different email systems. Some partners do not support S/MIME or PGP. They also need to comply with regulations that require encryption of data at rest. What solution should they adopt?

   • ARequire all partners to use S/MIME certificates.
   • BSend emails as encrypted PDF attachments.
   • CUse a gateway-based email encryption service that provides web-based secure message delivery for recipients without native encryption support.
   • DUse TLS for all email communications.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard · select all that apply

   A company is designing a mail policy framework. They need to ensure that: (1) emails from external senders to the finance department are scanned for DLP, (2) emails with malware indicators are quarantined, and (3) emails from known spam sources are rejected. Which of the following actions should they include in their mail policies? (Select all that apply.)

   • ACreate a policy that quarantines messages with malware indicators.
   • BCreate a policy that rejects messages from known spam sources.
   • CCreate a policy that deletes all messages with attachments.
   • DCreate a policy that applies DLP scanning to messages sent to the finance department.
   • ECreate a policy that encrypts all messages to the finance department.
   Check answers Discussion Select an answer first
5. 19expert · hard · select all that apply

   An organization must protect sensitive data in email. They want to implement DLP and also ensure that if data is sent, it is encrypted. They also want to allow users to override DLP blocks for legitimate business needs, with manager approval. Which of the following should be configured? (Select all that apply.)

   • AMail policy that quarantines all messages with sensitive data.
   • BEnable TLS for all outbound email.
   • CDLP policy that detects sensitive data and applies encryption.
   • DConfigure end-user notifications for DLP actions.
   • EDLP policy that blocks sensitive data and requires manager approval for override.
   Check answers Discussion Select an answer first
6. 20expert · hard · select all that apply

   A security team is configuring quarantine for a large organization. They want to ensure that: (1) users can release their own quarantined messages, (2) the security team is notified when a message is quarantined, and (3) messages that are not released are automatically deleted after 30 days. Which of the following should be configured? (Select all that apply.)

   • ASet quarantine retention period to 30 days.
   • BDisable user release to prevent accidental release of malicious messages.
   • CEnable end-user quarantine notifications and self-service release.
   • DConfigure security team alerts for quarantine events.
   • ESet quarantine retention period to 90 days.
   Check answers Discussion Select an answer first