Which of the following statements are true regarding Cisco Hybrid Email Security? (Choose three.)
A. Antivirus is handled at the gateway.
B. Mail that is filtered by policy is centrally quarantined.
C. Spam is centrally quarantined.
D. DLP is handled in the cloud.
E. Antispam is handled at the gateway.
Explanation:
Antispam and antivirus is handled at the gateway and spam is centrally quarantined when Cisco Hybrid Email Security is implemented. Antispam services are provided through the Talos IP Reputation Filters and the IronPort Anti-Spam feature. Antivirus services are provided by Sophos and McAfee antivirus scanning engines.
Cisco Hybrid Email Security offers a balanced approach that provides the flexibility of a cloud-based infrastructure combined with the security and control of an on-premises appliance. Cisco Hybrid Email Security and the Cisco Email Security Appliance (ESA) are preferable options when sensitive data must remain onsite.
With Cisco Hybrid Email Security, data loss prevention (DLP) is not handled in the cloud. Rather, it is handled by the on-premises appliance. Encryption is also handled on-premises. This enables sensitive data to remain onsite instead of being transmitted and stored in the cloud.
With Cisco Hybrid Email Security, mail that is filtered by policy is not centrally quarantined. Instead, it is quarantined on the Cisco Security Management appliance that filtered the mail. Because spam quarantine is handled in the cloud, spam is centrally quarantined in the cloud.
Reference: https://www.cisco.com/c/dam/en/us/td/docs/security/ces/overview_guide/Cisco_Cloud_Hybrid_Email_Security_Overview_Guide.pdf (PDF)