[Oct-2021] Pass Cisco 300-720 Exam in First Attempt Guaranteed!
Full 300-720 Practice Test and 92 unique questions with explanations waiting just for you, get it now!
NEW QUESTION 25
Email encryption is configured on a Cisco ESA that uses CRES.
Which action is taken on a message when CRES is unavailable?
- A. It is requeued.
- B. It is dropped and an error message is sent to the sender.
- C. It is encrypted by a Cisco encryption appliance.
- D. It is sent in clear text.
Answer: D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117863- configure-esa-00.html
NEW QUESTION 26
Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)
- A. The filterconfig command executed from the CLI is used to configure message filters.
- B. Message filters can be configured only from the CLI.
- C. Message filters configuration within the web user interface is located within Incoming Content Filters.
- D. The filters command executed from the CLI is used to configure the message filters.
- E. Message filters can be configured only from the web user interface.
Answer: B,D
NEW QUESTION 27
Which antispam feature is utilized to give end users control to allow emails that are spam to be delivered to their inbox, overriding any spam verdict and action on the Cisco ESA?
- A. end user allow list
- B. end user passthrough list
- C. end user spam quarantine access
- D. end user safelist
Answer: C
NEW QUESTION 28
Which setting affects the aggressiveness of spam detection?
- A. spam threshold
- B. spam timeout
- C. maximum depth of recursion scan
- D. protection level
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118220-technote- esa-00.html
NEW QUESTION 29
Which two are configured in the DMARC verification profile? (Choose two.)
- A. name of the verification profile
- B. message action to take when the policy is reject/quarantine
- C. minimum number of signatures to verify
- D. message action into an incoming or outgoing content filter
- E. ESA listeners to use the verification profile
Answer: A,B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_010101.html#task_1231917
NEW QUESTION 30
Email encryption is configured on a Cisco ESA that uses CRES.
Which action is taken on a message when CRES is unavailable?
- A. It is requeued.
- B. It is dropped and an error message is sent to the sender.
- C. It is encrypted by a Cisco encryption appliance.
- D. It is sent in clear text.
Answer: D
NEW QUESTION 31
How does the graymail safe unsubscribe feature function?
- A. It checks the reputation of the URI and performs the unsubscribe process on behalf of the end user.
- B. It redirects the end user who clicks the unsubscribe button to a sandbox environment to allow a safe unsubscribe.
- C. It checks the URI reputation and category and allows the content filter to take an action on it.
- D. It strips the malicious content of the URI before unsubscribing.
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200383-Graymail- Detection-and-Safe-Unsubscribin.html
NEW QUESTION 32
A Cisco ESA administrator was notified that a user was not receiving emails from a specific domain. After reviewing the mail logs, the sender had a negative sender-based reputation score.
What should the administrator do to allow inbound email from that specific domain?
- A. Create a new inbound mail policy with a message filter that overrides Talos.
- B. Add the domain into the allow list.
- C. Ask the user to add the sender to the email application's allow list.
- D. Modify the firewall to allow emails from the domain.
Answer: B
NEW QUESTION 33
Which two Cisco ESA features are used to control email delivery based on the sender? (Choose two.)
- A. spam quarantine
- B. blocklists
- C. safelists
- D. incoming mail policies
- E. outbreak filter
Answer: B,C
NEW QUESTION 34
When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?
- A. Enabling the End-User Safelist/Blocklist feature
- B. Spam Quarantine Alias Consolidation Query
- C. Spam Quarantine External Authentication Query
- D. Spam Quarantine End-User Authentication Query
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure- esa-00.html
NEW QUESTION 35
Which two steps configure Forged Email Detection? (Choose two.)
- A. Configure a filter to check the Header From value against the Forged Email Detection dictionary.
- B. Configure a content dictionary with executive email addresses.
- C. Configure a content dictionary with friendly names.
- D. Configure a filter to use the Forged Email Detection rule and dictionary.
- E. Enable Forged Email Detection on the Security Services page.
Answer: B,D
Explanation:
Reference:
https://explore.cisco.com/esa-feature-enablement/user-guide-for-async-11
NEW QUESTION 36
Refer to the exhibit.
Which SPF record is valid for mycompany.com?
- A. v=spf1 a mx ip4:199.209.31.2 -all
- B. v=spf1 a mx ip4:10.1.10.23 -all
- C. v=spf1 a mx ip4:199.209.31.21 -all
- D. v=spf1 a mx ip4:172.16.18.230 -all
Answer: D
NEW QUESTION 37
Which feature must be configured before an administrator can use the outbreak filter for nonviral threats?
- A. data loss prevention
- B. antivirus
- C. quarantine threat level
- D. antispam
Answer: D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01110.html
NEW QUESTION 38
What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?
- A. message encryption from the mail flow policies with "CRES" selected
- B. message encryption from a content filter that select "Message Encryption" over TLS
- C. provisioned email encryption profile
- D. content filter to forward the email to the Cisco Registered Envelope server
Answer: B
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010010.html
NEW QUESTION 39
What is the default behavior of any listener for TLS communication?
- A. preferred-verify
- B. preferred
- C. off
- D. required
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118954-config-esa- 00.html
NEW QUESTION 40
An analyst creates a new content dictionary to use with Forged Email Detection.
Which entry will be added into the dictionary?
- A. mycompany.com
- B. ^Alpha\ Beta$
- C. [email protected]
- D. Alpha Beta
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/products/collateral/security/email-security-appliance/ whitepaper_C11-737596.html
NEW QUESTION 41
......
Prepare for your Cisco certification with the updated PassSureExam 300-720 exam questions: https://drive.google.com/open?id=1kJCmbA9Hf2ah-vZFlVpQr4Nyvocq4IAl
Get Latest 300-720 Dumps Exam Questions in here: https://www.passsureexam.com/300-720-pass4sure-exam-dumps.html