Implementing and Operating Cisco Security Core Technologies (SCOR) — Question 65

An organization has a Cisco ESA set up with DLP policies and would like to customize the action assigned for violations. The organization wants a copy of the message to be delivered with a message added to flag it as a DLP violation. Which actions must be performed in order to provide this capability?

Answer options

• A. deliver and add disclaimer text
• B. quarantine and send a DLP violation notification
• C. quarantine and alter the subject header with a DLP violation
• D. deliver and send copies to other recipients

Correct answer: A

Explanation

The correct answer is A because it allows the message to be delivered with added disclaimer text that indicates a DLP violation. Options B and C involve quarantining the message, which does not meet the requirement of delivering a copy. Option D does not include the necessary disclaimer text to flag the message as a DLP violation.