5.7 Email Security Features CCIE-SECURITY Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A healthcare organization must ensure that patient emails are encrypted both in transit and at rest. They use a cloud email service. What should you configure?

   • AUse only TLS for all email communications.
   • BSet up a DLP policy to block patient data from being emailed.
   • CImplement SPF and DKIM to authenticate senders.
   • DEnable TLS for transport encryption and use message-level encryption for sensitive content.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company wants to block emails from known malicious senders and also quarantine messages that contain certain keywords. They want to manage this centrally. What should you do?

   • AUse separate DLP policies for sender blocking and content filtering.
   • BConfigure SPF and DMARC to reject emails from malicious senders.
   • CEnable quarantine for all incoming emails and manually review each one.
   • DCreate mail policies that combine sender/recipient filters and content filters, with actions like reject or quarantine.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A financial firm must prevent employees from sending unencrypted customer account numbers in emails. They also want to ensure that if such data is sent, it is encrypted automatically. What should you configure?

   • AEnable TLS for all outbound email.
   • BSet up a mail policy that blocks all emails containing numbers.
   • CCreate a DLP policy that detects account numbers and applies encryption to the message.
   • DUse DKIM to sign all outgoing emails.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   An organization wants to reduce the risk of phishing by holding emails that contain links to newly registered domains. They also want to allow the security team to analyze these emails before release. What should you implement?

   • AEnable DMARC to reject emails from unauthenticated senders.
   • BSet up a DLP policy to block emails with links.
   • CUse email encryption to protect the links.
   • DConfigure a mail policy that quarantines messages with suspicious links and notifies the security team.
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company is experiencing phishing attacks where attackers spoof their domain. They have SPF and DKIM configured, but some spoofed emails still get through. What should you implement to enforce a strict policy?

   • APublish a DMARC policy with p=reject to instruct receiving servers to reject messages that fail authentication.
   • BEnable TLS for all inbound email to prevent spoofing.
   • CCreate a mail policy that quarantines all emails from external senders.
   • DUse DLP to block emails with the company domain in the body.
   Reveal Solution Discussion Select an answer first