An engineer needs to configure Cisco Secure Email Gateway to scan all email from the HR department for viruses. The Sophos scanning engine must be used, and messages that might still contain viruses after repair must be quarantined. The following configuration has already been completed: - Antivirus scanning has been enabled on the email gateway. - A mail policy has been created for the HR department. Which two actions are required to complete the configuration? (Choose two.)