Service-Con-201 Service Cloud Solution Design Practice Question
An enterprise service desk receives high volumes of emails that frequently contain malicious attachments or executable files. The security team mandates that inbound email attachments must be scanned and stripped before being saved to Salesforce cases. Which architectural approach satisfies this requirement?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement an enterprise email security gateway before Email-to-Case, or use Apex Email Services to intercept and cleanse attachments.
Email-to-Case integration combined with an email security gateway or a custom Apex Email Service with pre-filtering ensures safe attachment ingestion.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a validation rule on the Attachment object checking file extensions.
Why it's wrong here
Validation rules on attachments can block file types upon insert, but do not scan or cleanse malicious payloads proactively.
- ✓
Implement an enterprise email security gateway before Email-to-Case, or use Apex Email Services to intercept and cleanse attachments.
Why this is correct
Interception via gateway or Apex Email Services allows inspection and sanitization before record creation.
- ✗
Disable attachments globally on Email-to-Case and require customers to upload via Experience Cloud.
Why it's wrong here
While secure, this fails business requirements if inbound email attachments are mandatory for customer workflows.
- ✗
Rely on standard Salesforce File security and antivirus settings in Setup.
Why it's wrong here
Salesforce does not provide native inbound email virus-scanning engines for standard Email-to-Case attachments.
About these practice questions
One of 318 original Service-Con-201 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Salesforce exam blueprint
This Service-Con-201 practice question is part of Courseiva's free Salesforce certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Service-Con-201 exam.