When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?

Which process is skipped when an email is received from safedomain.com, which is on the safelist?

Which two components must be configured to perform DLP scanning? (Choose two.)

A recent engine update was pulled down for graymail and has caused the service to start crashing. It is critical to fix this as quickly as possible.
What must be done to address this issue?

An engineer is configuring a Cisco ESA for the first time and needs to ensure that any email traffic coming from the internal SMTP servers is relayed out through the Cisco ESA and is tied to the Outgoing Mail Policies.
Which Mail Flow Policy setting should be modified to accomplish this goal?