mediumMultiple SelectObjective-mapped
350-701 Practice Question: Deploying Cisco Email Security Appliance (ESA) to…
A company is deploying Cisco Email Security Appliance (ESA) to protect against phishing attacks. The security team wants to implement two security features to detect malicious URLs in emails. Which two features should be enabled? (Choose two.)
⚠ Common exam trap
Cisco often tests the distinction between email authentication protocols (DKIM, SPF, DMARC) and content-based security features, so candidates mistakenly choose authentication methods when the question explicitly asks for features that detect malicious URLs in emails.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
URL reputation filtering
URL reputation filtering is correct because it uses the Cisco Talos threat intelligence to analyze and block emails containing malicious URLs based on real-time reputation scores. Cisco Advanced Phishing Protection is correct because it uses machine learning and behavioral analysis to detect and block sophisticated phishing URLs that may bypass traditional reputation checks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
DomainKeys Identified Mail (DKIM) signing
Why it's wrong here
DKIM ensures email integrity, not URL analysis.
- ✗
Sender Policy Framework (SPF) verification
Why it's wrong here
SPF validates the sending server, not URLs.
- ✗
Domain-based Message Authentication, Reporting & Conformance (DMARC)
Why it's wrong here
DMARC is for authentication policy, not URL detection.
- ✓
URL reputation filtering
Why this is correct
Checks URLs against threat intelligence databases.
- ✓
Cisco Advanced Phishing Protection
Why this is correct
Uses machine learning to detect malicious URLs and phishing attempts.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.