Associate Cloud Workspace Administrator · Free Practice Question Medium
Question 25
After implementing the Administrator Quarantine feature, you notice that some legitimate emails from trusted external partners are also getting quarantined, causing delays in business processes. What should you do to minimize false positives in the Administrator Quarantine without compromising security?
-
A
Configure the Administrator Quarantine to only last for a short period (e.g., one hour).
-
B
Add the trusted external partners to a 'Domain Allowlist'.
-
C
Manually approve each quarantined email daily.
-
D
Disable the Administrator Quarantine feature entirely.
Reveal correct answer
Correct answer: B
A. Configuring the Administrator Quarantine to only last for a short period, such as one hour, may reduce the impact of false positives by releasing quarantined emails quickly. However, this approach may not be sufficient to minimize false positives in the long term and could potentially compromise security by allowing harmful emails to pass through unchecked.
B. Adding trusted external partners to a 'Domain Allowlist' ensures that emails from these partners are not mistakenly quarantined. This approach minimizes false positives by explicitly allowing emails from specific domains, maintaining security while reducing the risk of legitimate emails being blocked.
C. Manually approving each quarantined email daily is not a scalable solution and can lead to delays in processing legitimate emails. This approach increases the risk of missing important emails and does not effectively minimize false positives in the Administrator Quarantine.
D. Disabling the Administrator Quarantine feature entirely is not recommended as it eliminates the security measure put in place to protect against potentially harmful emails. This action compromises security and does not address the issue of minimizing false positives while maintaining protection.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
