350-701 Content Security Practice Question
A security analyst notices that a user is receiving a high volume of emails from unknown senders with links to malicious sites. The ESA is configured with Cisco TALOS threat intelligence. Which ESA feature should the analyst configure to block these emails based on the reputation of the sender before they reach the user's inbox?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
IronPort SenderBase reputation
The IronPort SenderBase reputation system uses SBRS scores to filter email based on sender reputation, blocking messages from low-reputation senders before delivery.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Anti-malware with AMP for Email
Why it's wrong here
AMP for Email is for detecting malware in attachments, not sender reputation.
- ✗
Outbreak filters
Why it's wrong here
Outbreak filters use TALOS intelligence to detect emerging threats, but sender reputation is the primary mechanism for blocking based on sender history.
- ✗
DLP policies
Why it's wrong here
DLP policies scan for sensitive content in outbound email, not inbound sender reputation.
- ✓
IronPort SenderBase reputation
Why this is correct
SenderBase reputation uses SBRS scores to block low-reputation senders.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.