Free Cisco 300-720 Test Practice Test Questions Exam Dumps
Prepare Top Cisco 300-720 Exam Audio Study Guide Practice Questions Edition
NEW QUESTION 41
When email authentication is configured on Cisco ESA, which two key types should be selected on the signing profile? (Choose two.)
- A. Symmetric Keys
- B. Domain Keys
- C. DKIM
- D. Private Keys
- E. Public Keys
Answer: B,C
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213939-esa- configure-dkim-signing.html
NEW QUESTION 42
Drag and drop the steps to configure Cisco ESA to use SPF/SIDF verification from the left into the correct order on the right.
Answer:
Explanation:
NEW QUESTION 43
Which two components must be configured to perform DLP scanning? (Choose two.)
- A. Add a DLP policy to the Outgoing Content Filter.
- B. Enable a DLP policy on the Outgoing Mail Policy.
- C. Add a DLP policy on the Incoming Mail Policy.
- D. Add a DLP policy to the DLP Policy Manager.
- E. Enable a DLP policy on the DLP Policy Customizations.
Answer: B,D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_010001.html
NEW QUESTION 44
An engineer is tasked with reviewing mail logs to confirm that messages sent from domain abc.com are passing SPF verification and being accepted by the Cisco ESA. The engineer notices that SPF verification is not being performed and that SPF is not being referenced in the logs for messages sent from domain abc.com.
Why is the verification not working properly?
- A. SPF verification is disabled on the Mail Flow Policy.
- B. The SPF conformance level is set to SIDF compatible on the Mail Flow Policy.
- C. An SPF verification Content Filter has not been created.
- D. SPF verification is disabled in the Recipient Access Table.
Answer: C
NEW QUESTION 45
Which type of query must be configured when setting up the Spam Quarantine while merging notifications?
- A. Spam Quarantine Alias Routing Query
- B. Spam Quarantine Alias Consolidation Query
- C. Spam Quarantine Alias Authentication Query
- D. Spam Quarantine Alias Masquerading Query
Answer: B
NEW QUESTION 46
Which global setting is configured under Cisco ESA Scan Behavior?
- A. minimum attachment size to scan
- B. attachment scanning timeout
- C. minimum depth of attachment recursion to scan
- D. actions for unscannable messages due to attachment type
Answer: B
Explanation:
Reference:
https://community.cisco.com/t5/email-security/cisco-ironport-esa-security-services-scan-behavior- impact-on-av/td-p/3923243
NEW QUESTION 47
An engineer is configuring a Cisco ESA for the first time and needs to ensure that any email traffic coming from the internal SMTP servers is relayed out through the Cisco ESA and is tied to the Outgoing Mail Policies.
Which Mail Flow Policy setting should be modified to accomplish this goal?
- A. Connection Behavior
- B. Exception List
- C. Reverse Connection Verification
- D. Bounce Detection Signing
Answer: A
NEW QUESTION 48
Which SMTP extension does Cisco ESA support for email security?
- A. ETRN
- B. UTF8SMTP
- C. STARTTLS
- D. PIPELINING
Answer: C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011000.html
NEW QUESTION 49
Which two features are applied to either incoming or outgoing mail policies? (Choose two.)
- A. outbreak filters
- B. Indication of Compromise
- C. antivirus
- D. sender reputation filtering
- E. application filtering
Answer: A,C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html
NEW QUESTION 50
An email containing a URL passes through the Cisco ESA that has content filtering disabled for all mail policies. The sender is [email protected], the recipients are [email protected], [email protected], [email protected], and [email protected]. The subject of the email is Test Document395898847. An administrator wants to add a policy to ensure that the Cisco ESA evaluates the web reputation score before permitting this email.
Which two criteria must be used by the administrator to achieve this? (Choose two.)
- A. Email body contains a URL
- B. Subject contains Test Document"
- C. Date and time of email
- D. Sender matches test1.com
- E. Email does not match [email protected]
Answer: A,B
NEW QUESTION 51
Which antispam feature is utilized to give end users control to allow emails that are spam to be delivered to their inbox, overriding any spam verdict and action on the Cisco ESA?
- A. end user allow list
- B. end user passthrough list
- C. end user safelist
- D. end user spam quarantine access
Answer: D
NEW QUESTION 52
What is a valid content filter action?
- A. skip antispam
- B. quarantine
- C. decrypt on delivery
- D. archive
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01010.html#con_1158022
NEW QUESTION 53
When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?
- A. Spam Quarantine End-User Authentication Query
- B. Spam Quarantine Alias Consolidation Query
- C. Spam Quarantine External Authentication Query
- D. Enabling the End-User Safelist/Blocklist feature
Answer: A
NEW QUESTION 54
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?
- A. Map the envelope sender address to the host.
- B. Apply a filter on the message.
- C. Issue the altsrchost command.
- D. Set up the interface group with the flag.
Answer: C
NEW QUESTION 55
What is a benefit of implementing URL filtering on the Cisco ESA?
- A. removes threats from malicious URLs
- B. provides URL reputation protection
- C. blacklists spam
- D. enhances reputation against malicious URLs
Answer: B
NEW QUESTION 56
What are two prerequisites for implementing undesirable URL protection in Cisco ESA? (Choose two.)
- A. Enable antivirus scanning.
- B. Enable antispam scanning.
- C. Enable port bouncing.
- D. Enable outbreak filters.
- E. Enable email relay.
Answer: B,D
NEW QUESTION 57
What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?
- A. content filter to forward the email to the Cisco Registered Envelope server
- B. message encryption from a content filter that select "Message Encryption" over TLS
- C. message encryption from the mail flow policies with "CRES" selected
- D. provisioned email encryption profile
Answer: B
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010010.html
NEW QUESTION 58
When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?
- A. AAAA record
- B. MX record
- C. PTR record
- D. TXT record
Answer: D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213939-esa- configure-dkim-signing.html
NEW QUESTION 59
What is the maximum message size that can be configured for encryption on the Cisco ESA?
- A. 25 MB
- B. 15 MB
- C. 20 MB
- D. 30 MB
Answer: C
NEW QUESTION 60
......
Exam 300-720 Domains
Here are the main topics that will be tested in the Cisco 300-720:
- Authenticating and encrypting Emails;
- LDAP & SMTP sessions;
- Cisco Email ESA administration;
- Systems quarantines in addition to delivery processes.
- Using Talos SenderBase as well as anti-spam for spam control;
- Filters for content as well as messages;
The above-discussed areas are the most common in the actual exam, but testing is not necessarily limited to them. The guidelines may change so you are advised to revise extensively for the official exam so that you pass it in one go.
Go to 300-720 Questions - Try 300-720 dumps pdf : https://www.braindumpsvce.com/300-720_exam-dumps-torrent.html
Dumps Practice Exam Questions Study Guide for the 300-720 Exam: https://drive.google.com/open?id=1m0bTGlrCwJuDS8VzTxZs9eBJ1lLTzsdE