mediumMultiple ChoiceObjective-mapped
350-701 Practice Question: Uses Cisco ESA and wants to implement a policy…
An organization uses Cisco ESA and wants to implement a policy that automatically encrypts emails containing credit card numbers before delivery. What feature should be used?
⚠ Common exam trap
Candidates often confuse DLP with anti-spam or anti-virus engines, assuming any security feature can handle content-based encryption, but only DLP policies have the specific content inspection and policy-driven encryption action capability in Cisco ESA.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
DLP policy with encryption action
D is correct because Cisco ESA includes a Data Loss Prevention (DLP) feature that can scan email content for sensitive data patterns, such as credit card numbers (matching Luhn algorithm and known issuer prefixes). When a match is found, the DLP policy can trigger an encryption action, automatically encrypting the email before delivery to protect the sensitive information in transit.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Anti-spam engine
Why it's wrong here
Anti-spam detects spam, not sensitive data.
- ✗
Anti-virus engine
Why it's wrong here
Anti-virus detects malware.
- ✗
Email authentication (SPF, DKIM)
Why it's wrong here
Email authentication verifies sender domain, not content.
- ✓
DLP policy with encryption action
Why this is correct
DLP can trigger encryption based on policy.
Go deeper
Related to this question
About these practice questions
One of 978 original 350-701 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.