Exam 300-720 topic 1 question 81 discussion

D is Correct. Enabling Bounce Verification is a very good way to combat backscatter/bounce attacks. The concept behind bounce verification is simple. First, mark up messages leaving your ESA. Look for that markup on any bounce messages, if the markup is present, it means that this is a bounce of a message that originated in your environment. If the markup is missing, the bounce is fraudulent and can be rejected or dropped. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_011001.html?bookSearch=true#con_1134690

B is Correct. To combat backscatter on a Cisco ESA (Email Security Appliance), the feature that must be activated is: B. Bounce Profile. Activating the Bounce Profile feature helps to address backscatter by controlling and customizing how bounce messages are handled by the Cisco ESA. The Bounce Profile allows administrators to define specific actions for different types of bounce messages, such as dropping them, sending them to quarantine, or redirecting them to a specific email address. By configuring the Bounce Profile appropriately, administrators can minimize the impact of backscatter, reduce unnecessary bounce messages, and prevent innocent parties from receiving bounce notifications for spoofed or malicious emails. While features like Graymail Detection, Forged Email Detection, and Bounce Verification are important for overall email security, they are not specifically designed to combat backscatter. The Bounce Profile feature specifically addresses the management of bounce messages and helps mitigate the impact of backscatter.