Cisco Exam 300-720 Topic 10 Question 95 Discussion

Actual exam question for Cisco's 300-720 exam

Question #: 95
Topic #: 10

A trusted partner of an organization recently experienced a new campaign that was leveraging JavaScript attachments to trick users into executing malware. As a result, they created a local policy to deny messages with JavaScript attachments. Which action should the administrator of the organization take to ensure encrypted communications are delivered to the intended partner recipient?

AInsert the X-PostX-Use-Script' header with a value of false to the encrypted messages

BSelect JavaScript-free' option within the Cisco Secure Email Encryption Service Add-in

CCreate an outgoing content filter and add the Encrypt and Deliver Nov/ action with Use-Script option deselected

DCreate a new encryption profile and deselect the 'Use-Script' envelope settings option.

Show Suggested Answer

Suggested Answer: D

According to theUser Guide for Cisco Secure Email Encryption Service Add-In 1, the 'Use-Script' option allows you to use JavaScript in the encrypted message envelope. This option is enabled by default, but you can disable it if you want to send encrypted messages to recipients who have security policies that block JavaScript attachments[2, p. 14].

The other options are not valid because:

A)Inserting the X-PostX-Use-Script header with a value of false to the encrypted messages is not a supported feature of the Cisco Secure Email Encryption Service Add-in1.

B) Selecting JavaScript-free option within the Cisco Secure Email Encryption Service Add-in is not a valid option.The add-in does not have such an option1.

C) Creating an outgoing content filter and adding the Encrypt and Deliver Nov/ action with Use-Script option deselected is not possible. The Encrypt and Deliver Nov/ action does not have a Use-Script option[2, p. 13].

by Doyle at Sep 19, 2024, 08:02 AM

Limited Time Offer

25%

20 days ago

Hmm, I think option D is the way to go. Deselecting the 'Use-Script' envelope settings sounds like the best way to ensure encrypted communications are delivered without the JavaScript issue.

upvoted 0 times

Brynn

3 days ago

User 1: I think option D is the best choice.

upvoted 0 times

...