Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 590

Email security has become a high-priority task for a security engineer at a large multi-national organization due to ongoing phishing campaigns. To help control this, the engineer has deployed an Incoming Content Filter with a URL reputation of (`"10.00 to `"6.00) on the Cisco ESA. Which action will the system perform to desirable any links in messages that match the filter?

Answer options

• A. Defang
• B. FilterAction
• C. Quarantine
• D. ScreenAction

Correct answer: A

Explanation

The correct action is 'Defang', which neutralizes harmful links by altering them to prevent users from accidentally clicking on them. 'FilterAction' doesn't specify a protective measure, while 'Quarantine' isolates suspicious messages but does not specifically address links. 'ScreenAction' is also not aimed at modifying links in emails.