To migrate from a local spam quarantine to a centralized spam quarantine, the local spam quarantine on the Cisco Secure Email Gateway must be disabled, and the appliance must be configured to use an external spam quarantine. This redirects spam quarantine handling to the Cisco Secure Email and Web Manager.

Modify Subject is an additional option that should be used to help the end users be aware of the elevated risk of interacting with these messages. Modify Subject allows the administrator to add a prefix or suffix to the message subject, such as "[SPF Fail]", to indicate that the message has failed the SPF verification and may be fraudulent or spoofed. The other options are not valid additional options to help the end users be aware of the elevated risk of interacting with these messages, because they do not affect the message subject or provide any warning to the end users.

A content filter action is an operation that Cisco ESA performs on a message if it matches the conditions of a content filter rule, such as headers, envelope, body, attachments, etc. Quarantine is a valid content filter action that allows Cisco ESA to store the message in a quarantine area for further review or release by an administrator or an end user. The other options are not valid content filter actions on Cisco ESA.
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/ b_ESA_Admin_Guide_chapter_01010.html#con_1158022

To ensure that the configured Message Action in the default DMARC verification profile on a Cisco ESA matches the policy specified in the DMARC record, you need to align the actions in the DMARC verification profile with the policies stated in the DMARC record.
The correct configuration should align with the DMARC policies as follows:
If the policy in the DMARC record is "reject," the action in the DMARC verification profile should be set to "reject." If the policy in the DMARC record is "quarantine," the action should be set to "quarantine." If the policy in the DMARC record is "none," the action should typically be set to "no action" (or something equivalent that implies no special handling).