mediumMultiple SelectObjective-mapped
350-701 Practice Question: Which THREE of the following are capabilities of…
Which THREE of the following are capabilities of Cisco Email Security Appliance (ESA) for content filtering? (Choose three.)
⚠ Common exam trap
Cisco often tests the distinction between native ESA capabilities (like anti-spam, anti-virus, and DLP) and optional integrated features (like sandboxing), leading candidates to mistakenly select sandboxing as a core content filtering function.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Anti-spam filtering
B is correct because Cisco ESA includes a sophisticated anti-spam filtering engine that uses multiple techniques such as SenderBase reputation, contextual analysis, and signature-based detection to identify and block unwanted email messages. This is a core content security capability of the ESA, operating at the email gateway to filter inbound and outbound traffic.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Intrusion Prevention System (IPS)
Why it's wrong here
IPS is not a feature of ESA; it is for network security appliances.
- ✓
Anti-spam filtering
Why this is correct
ESA uses Cisco's and third-party anti-spam engines.
- ✗
Zero-day malware protection using sandboxing
Why it's wrong here
Zero-day protection is advanced malware protection, but not part of base content filtering; it's an add-on.
- ✓
Anti-virus scanning
Why this is correct
ESA includes Sophos and McAfee anti-virus engines.
- ✓
Data Loss Prevention (DLP)
Why this is correct
ESA includes DLP for sensitive data detection.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-701 question from scratch — 978 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-701 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-701 exam.