Securing Email with Cisco Email Security Appliance (SESA) — Question 123

A company security policy requires that the finance department have an easy way to apply encryption to their outbound messages that contain sensitive data. Users must be able to flag the messages that require encryption versus a Cisco ESA scanning all messages and automatically encrypting via detection. Which action enables this capability?

Answer options

• A. Create an outgoing content filter with no conditions and with the Encrypt and Deliver Now action configured with [SECURE] in the Subject setting.
• B. Create a DLP policy manager message action with encryption enabled and apply it to active DLP policies for outgoing mail.
• C. Create an encryption profile with [SECURE] in the Subject setting and enable encryption on the mail flow policy.
• D. Create an encryption profile and an outgoing content filter that includes \[SECURE\] within the Subject Header: Contains condition along with the Encrypt and Deliver Now action.

Correct answer: D

Explanation

The correct answer is D because it combines the outgoing content filter and the encryption profile, allowing users to flag messages that require encryption based on the Subject Header. Options A, B, and C do not provide the necessary user interaction for flagging messages, as they either filter all outgoing messages or do not involve user input.