Certbie
Question 1 of 30
A financial services company is implementing attachment filtering on their email security appliance to mitigate the risk of malware and phishing attacks. They have identified several file types that are commonly used in attacks, including executable files, scripts, and compressed files. The security team decides to create a policy that blocks all executable files and scripts while allowing compressed files, but only if they are password-protected. Given this scenario, which of the following statements best describes the implications of this attachment filtering policy on the company\'s email security posture?
The policy effectively reduces the attack surface by preventing the execution of potentially harmful files while allowing legitimate compressed files, which can be scanned for threats if they are password-protected.
The policy may inadvertently allow malicious content to bypass filtering if attackers use password-protected compressed files, as these can contain harmful executables that are not scanned.
The policy is overly restrictive and may hinder business operations by blocking legitimate executable files that are necessary for software updates and internal applications.
The policy does not address the risk of phishing attacks, as it only focuses on file types and does not consider the content of the emails themselves.

Preparing for CISCO 300-720 Securing Email with Cisco Email Security Appliance (SESA)? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free