easyMultiple ChoiceObjective-mapped
350-701 Practice Question: Prevent confidential data (e.g., credit card…
An administrator wants to prevent confidential data (e.g., credit card numbers) from being sent via email using Cisco ESA. Which feature should be enabled and configured with the appropriate dictionary?
⚠ Common exam trap
Cisco often tests the distinction between content inspection features (DLP) and threat-focused features (Outbreak Filters, Anti-Spam), leading candidates to confuse message filters or outbreak filters with DLP's specialized data classification capabilities.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Data Loss Prevention (DLP) with a predefined credit card dictionary
Cisco ESA's Data Loss Prevention (DLP) feature is specifically designed to inspect outbound messages for sensitive data patterns, such as credit card numbers, using predefined dictionaries. By enabling DLP and selecting the appropriate credit card dictionary, the administrator can enforce policies to block or quarantine emails containing confidential information, directly addressing the requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Outbreak Filters with file reputation
Why it's wrong here
Outbreak Filters protect from malware, not data loss.
- ✗
Anti-Spam with URL reputation
Why it's wrong here
Anti-spam is for spam, not for DLP.
- ✗
Message Filters with regex pattern matching
Why it's wrong here
While regex can match credit cards, DLP is the prescribed solution and more robust.
- ✓
Data Loss Prevention (DLP) with a predefined credit card dictionary
Why this is correct
DLP is designed for sensitive data detection using predefined dictionaries.
Go deeper
Related to this question
About these practice questions
This 350-701 question is part of Courseiva's 978-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.