Q1. Which of the following is NOT a feature of Barracuda Email Gateway
Defense?
A. Spam filtering
B. Malware scanning
C. Litigation hold archiving
D. Data loss prevention
✔ Answer: C. Litigation hold archiving
Explanation: Barracuda Email Gateway Defense focuses on filtering,
encryption, and DLP, but archiving and litigation holds are part of Barracuda
Message Archiver, not EGD.
Q2. Barracuda Real-Time Intent Database helps prevent:
A. Malware execution
B. User password resets
C. Access to phishing URLs and malicious domains
D. Network bandwidth abuse
✔ Answer: C. Access to phishing URLs and malicious domains
Explanation: RTID continuously updates intelligence on phishing domains,
malware URLs, and known bad senders to block them before delivery.
Q3. Spooling in Email Gateway Defense is required for:
A. Encryption
B. Email continuity
C. Rate limiting
D. Outbound DLP
✔ Answer: B. Email continuity
Explanation: Spooling ensures that when a mail server is unavailable, EGD
holds (spools) messages up to 96 hours until delivery can resume.
,Q4. What type of rate control does Barracuda apply for inbound mail?
A. User-based
B. IP-based
C. Domain-based
D. Policy-based
✔ Answer: B. IP-based
Explanation: Rate limiting is applied based on the sending IP to stop
spammers from overwhelming systems.
Q5. Which combination is used for virus detection in Email Gateway Defense?
A. Proprietary definitions only
B. Open-source definitions only
C. Open-source + Proprietary virus signatures
D. Heuristic scanning only
✔ Answer: C. Open-source + Proprietary virus signatures
Explanation: Barracuda uses multiple virus engines, including open-source
and proprietary databases, to improve detection rates.
Module 2 – Getting Started with EGD
Q6. Which step is first when deploying Barracuda Email Gateway Defense?
A. Configure encryption policies
B. Add domains to be protected
C. Create user quarantine mailboxes
D. Configure outbound relay
✔ Answer: B. Add domains to be protected
Explanation: Before configuring advanced policies, you must first register the
domains EGD will secure.
Q7. What must be updated in DNS when configuring EGD for inbound
protection?
A. SPF record
B. MX record
C. DKIM record
D. PTR record
,✔ Answer: B. MX record
Explanation: To route mail through EGD, the MX record is updated to point to
Barracuda’s servers.
Q8. Which sender authentication methods are supported?
A. SPF, DKIM, DMARC
B. SPF, RBL, LDAP
C. DKIM, TLS, Archiving
D. None
✔ Answer: A. SPF, DKIM, DMARC
Explanation: Barracuda supports industry-standard authentication to prevent
spoofing and phishing.
Q9. End-users can log into EGD using:
A. LDAP/AD credentials
B. Local EGD account
C. SSO (Office 365/Google Workspace)
D. All of the above
✔ Answer: D. All of the above
Explanation: EGD supports multiple authentication sources depending on
admin configuration.
Q10. Which scenario would cause an email to be deferred?
A. Blocked by content filter
B. ATP scan pending
C. Sender domain on whitelist
D. Quarantined spam
✔ Answer: B. ATP scan pending
Explanation: With “Scan first, then deliver” ATP mode, suspicious
attachments delay delivery until fully scanned.
Module 3 – Administration, Operations & User Management
Q11. The Message Log in EGD can be filtered by:
A. Sender/recipient
, B. Status (delivered, deferred, blocked)
C. Date/time
D. All of the above
✔ Answer: D. All of the above
Explanation: The log provides detailed search and filter options for
administrators and end-users.
Q12. If a user is allowed by the admin, they can:
A. Whitelist/blacklist senders
B. Adjust spam thresholds
C. Configure encryption policies
D. Create outbound filters
✔ Answer: A. Whitelist/blacklist senders
Explanation: End-users may be granted control over personal sender lists, but
not global policies.
Q13. Non-Delivery Reports (NDRs) are sent when:
A. A message is quarantined
B. A message cannot be delivered
C. A message triggers encryption
D. A message is deferred
✔ Answer: B. A message cannot be delivered
Explanation: NDRs notify senders when delivery fails permanently.
Q14. Which type of admin can manage all domains?
A. Domain admin
B. Global admin
C. User admin
D. Quarantine admin
✔ Answer: B. Global admin
Explanation: Global admins manage all domains, while domain admins
manage only assigned domains.
Defense?
A. Spam filtering
B. Malware scanning
C. Litigation hold archiving
D. Data loss prevention
✔ Answer: C. Litigation hold archiving
Explanation: Barracuda Email Gateway Defense focuses on filtering,
encryption, and DLP, but archiving and litigation holds are part of Barracuda
Message Archiver, not EGD.
Q2. Barracuda Real-Time Intent Database helps prevent:
A. Malware execution
B. User password resets
C. Access to phishing URLs and malicious domains
D. Network bandwidth abuse
✔ Answer: C. Access to phishing URLs and malicious domains
Explanation: RTID continuously updates intelligence on phishing domains,
malware URLs, and known bad senders to block them before delivery.
Q3. Spooling in Email Gateway Defense is required for:
A. Encryption
B. Email continuity
C. Rate limiting
D. Outbound DLP
✔ Answer: B. Email continuity
Explanation: Spooling ensures that when a mail server is unavailable, EGD
holds (spools) messages up to 96 hours until delivery can resume.
,Q4. What type of rate control does Barracuda apply for inbound mail?
A. User-based
B. IP-based
C. Domain-based
D. Policy-based
✔ Answer: B. IP-based
Explanation: Rate limiting is applied based on the sending IP to stop
spammers from overwhelming systems.
Q5. Which combination is used for virus detection in Email Gateway Defense?
A. Proprietary definitions only
B. Open-source definitions only
C. Open-source + Proprietary virus signatures
D. Heuristic scanning only
✔ Answer: C. Open-source + Proprietary virus signatures
Explanation: Barracuda uses multiple virus engines, including open-source
and proprietary databases, to improve detection rates.
Module 2 – Getting Started with EGD
Q6. Which step is first when deploying Barracuda Email Gateway Defense?
A. Configure encryption policies
B. Add domains to be protected
C. Create user quarantine mailboxes
D. Configure outbound relay
✔ Answer: B. Add domains to be protected
Explanation: Before configuring advanced policies, you must first register the
domains EGD will secure.
Q7. What must be updated in DNS when configuring EGD for inbound
protection?
A. SPF record
B. MX record
C. DKIM record
D. PTR record
,✔ Answer: B. MX record
Explanation: To route mail through EGD, the MX record is updated to point to
Barracuda’s servers.
Q8. Which sender authentication methods are supported?
A. SPF, DKIM, DMARC
B. SPF, RBL, LDAP
C. DKIM, TLS, Archiving
D. None
✔ Answer: A. SPF, DKIM, DMARC
Explanation: Barracuda supports industry-standard authentication to prevent
spoofing and phishing.
Q9. End-users can log into EGD using:
A. LDAP/AD credentials
B. Local EGD account
C. SSO (Office 365/Google Workspace)
D. All of the above
✔ Answer: D. All of the above
Explanation: EGD supports multiple authentication sources depending on
admin configuration.
Q10. Which scenario would cause an email to be deferred?
A. Blocked by content filter
B. ATP scan pending
C. Sender domain on whitelist
D. Quarantined spam
✔ Answer: B. ATP scan pending
Explanation: With “Scan first, then deliver” ATP mode, suspicious
attachments delay delivery until fully scanned.
Module 3 – Administration, Operations & User Management
Q11. The Message Log in EGD can be filtered by:
A. Sender/recipient
, B. Status (delivered, deferred, blocked)
C. Date/time
D. All of the above
✔ Answer: D. All of the above
Explanation: The log provides detailed search and filter options for
administrators and end-users.
Q12. If a user is allowed by the admin, they can:
A. Whitelist/blacklist senders
B. Adjust spam thresholds
C. Configure encryption policies
D. Create outbound filters
✔ Answer: A. Whitelist/blacklist senders
Explanation: End-users may be granted control over personal sender lists, but
not global policies.
Q13. Non-Delivery Reports (NDRs) are sent when:
A. A message is quarantined
B. A message cannot be delivered
C. A message triggers encryption
D. A message is deferred
✔ Answer: B. A message cannot be delivered
Explanation: NDRs notify senders when delivery fails permanently.
Q14. Which type of admin can manage all domains?
A. Domain admin
B. Global admin
C. User admin
D. Quarantine admin
✔ Answer: B. Global admin
Explanation: Global admins manage all domains, while domain admins
manage only assigned domains.
