mediumMultiple ChoiceObjective-mapped
350-701 Practice Question: Is migrating from on-premises Cisco ESA to Cisco…
An organization is migrating from on-premises Cisco ESA to Cisco Cloud Email Security (CES). They need to ensure that email encryption policies remain consistent after migration. What is the best approach to migrate the encryption policies?
⚠ Common exam trap
Cisco often tests the misconception that API-based migration or centralized management tools like SMS can handle cloud migrations, when in fact the export/import feature is the only supported method for transferring ESA policies to CES.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Export the configuration from on-premises ESA and import into CES
Cisco Cloud Email Security (CES) supports importing configuration files exported from on-premises Cisco ESA, including encryption policies. This ensures consistency by directly transferring the policy definitions without manual re-creation, leveraging the same underlying policy engine and encryption protocols (e.g., TLS, S/MIME, or PGP) used on-premises.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Export the configuration from on-premises ESA and import into CES
Why this is correct
Export/import preserves exact policy settings and is the recommended migration approach.
- ✗
Use the Cisco ESA API to migrate policies automatically
Why it's wrong here
The API may not cover all policy types and requires significant development effort.
- ✗
Recreate the policies manually in CES based on existing documentation
Why it's wrong here
Manual recreation is prone to errors and inconsistencies.
- ✗
Synchronize the two appliances using Cisco Security Management Suite
Why it's wrong here
Cisco Security Management Suite does not directly sync on-premises ESA with cloud CES.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.