Get Started: 300-720 Exam [2023] Dumps Cisco PDF Questions
300-720 Premium Exam Engine pdf Download
Target Audience
The Cisco 300-720 is designed for people who work around Email security and other networking domains. Some of the specialists who are targeted by this test include security engineers, network administrators, network architects, network engineers, and more.
NEW QUESTION 38
Email encryption is configured on a Cisco ESA that uses CRES.
Which action is taken on a message when CRES is unavailable?
- A. It is sent in clear text.
- B. It is dropped and an error message is sent to the sender.
- C. It is requeued.
- D. It is encrypted by a Cisco encryption appliance.
Answer: A
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117863- configure-esa-00.html
NEW QUESTION 39
What is a valid content filter action?
- A. decrypt on delivery
- B. archive
- C. skip antispam
- D. quarantine
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01010.html#con_1158022
NEW QUESTION 40
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?
- A. Issue the altsrchost command.
- B. Set up the interface group with the flag.
- C. Map the envelope sender address to the host.
- D. Apply a filter on the message.
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html#con_1133810
NEW QUESTION 41
An administrator must ensure that emails sent from [email protected] are routed through an alternate virtual gateway. Drag and drop the snippet from the bottom onto the blank in the graphic to finish the message filter syntax. Not all snippets are used.
Answer:
Explanation:
Explanation
Table Description automatically generated
NEW QUESTION 42
Which two features of Cisco Email Security are added to a Sender Group to protect an organization against email threats? (Choose two.)
- A. geolocation-based filtering
- B. NetFlow
- C. content disarm and reconstruction
- D. heuristic-based filtering
- E. senderbase reputation filtering
Answer: D,E
NEW QUESTION 43
Which ESA feature is used to apply smart identifiers?
- A. Text resources
- B. Content filters
- C. RSA data loss prevention engine
- D. Encryption policies
Answer: B
NEW QUESTION 44
DRAG DROP
Drag and drop the Cisco ESA reactions to a possible DLP from the left onto the correct action types on the right.
Select and Place:
Answer:
Explanation:
Explanation/Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/ b_ESA_Admin_Guide_chapter_010001.html (message actions)
NEW QUESTION 45
When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?
- A. Enabling the End-User Safelist/Blocklist feature
- B. Spam Quarantine Alias Consolidation Query
- C. Spam Quarantine End-User Authentication Query
- D. Spam Quarantine External Authentication Query
Answer: C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692- configure-esa-00.html
NEW QUESTION 46
An administrator has created a content filter to quarantine all messages that result in an SPF hardfail to review the messages and determine whether a trusted partner has accidentally misconfigured the DNS settings. The administrator sets the policy quarantine to release the messages after 24 hours, allowing time to review while not interrupting business.
Which additional option should be used to help the end users be aware of the elevated risk of interacting with these messages?
- A. Notify Sender
- B. Strip Attachments
- C. Notify Recipient
- D. Modify Subject
Answer: D
NEW QUESTION 47
Refer to the exhibit.
Which SPF record is valid for mycompany.com?
- A. v=spf1 a mx ip4:172.16.18.230 -all
- B. v=spf1 a mx ip4:199.209.31.2 -all
- C. v=spf1 a mx ip4:10.1.10.23 -all
- D. v=spf1 a mx ip4:199.209.31.21 -all
Answer: A
NEW QUESTION 48
Which two components must be configured to perform DLP scanning? (Choose two.)
- A. Add a DLP policy on the Incoming Mail Policy.
- B. Add a DLP policy to the DLP Policy Manager.
- C. Enable a DLP policy on the Outgoing Mail Policy.
- D. Enable a DLP policy on the DLP Policy Customizations.
- E. Add a DLP policy to the Outgoing Content Filter.
Answer: B,C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_010001.html
NEW QUESTION 49
When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?
- A. 30 seconds
- B. 120 seconds
- C. 60 seconds
- D. 90 seconds
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html
NEW QUESTION 50
Which feature utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco ESA?
- A. Connection Reputation Filtering
- B. Talos Reputation Filtering
- C. SenderBase Reputation Filtering
- D. SpamCop Reputation Filtering
Answer: C
NEW QUESTION 51
What occurs when configuring separate incoming mail policies?
- A. message splintering
- B. message detachment
- C. message aggregation
- D. message exceptions
Answer: A
NEW QUESTION 52
Which two query types are available when an LDAP profile is configured? (Choose two.)
- A. proxy consolidation
- B. routing
- C. recursive
- D. user
- E. group
Answer: B,E
NEW QUESTION 53
When configuring CRES, where do you enable read receipts?
- A. In the encryption profile
- B. In the content filter action menu
- C. In the content filter condition menu
- D. In the mail policy
Answer: A
NEW QUESTION 54
Which two steps configure Forged Email Detection? (Choose two.)
- A. Configure a filter to use the Forged Email Detection rule and dictionary.
- B. Enable Forged Email Detection on the Security Services page.
- C. Configure a content dictionary with friendly names.
- D. Configure a content dictionary with executive email addresses.
- E. Configure a filter to check the Header From value against the Forged Email Detection dictionary.
Answer: A,D
NEW QUESTION 55
Which two actions are configured on the Cisco ESA to query LDAP servers? (Choose two.)
- A. delay
- B. relay
- C. accept
- D. reject
- E. route
Answer: C,E
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-0/user_guide_fs/ b_ESA_Admin_Guide_11_0/b_ESA_Admin_Guide_chapter_011010.html
NEW QUESTION 56
Drag and Drop Question
Drag and drop the Cisco ESA reactions to a possible DLP from the left onto the correct action types on the right.
Answer:
Explanation:
NEW QUESTION 57
An organization wants to use its existing Cisco ESA to host a new domain and enforce a separate corporate policy for that domain.
What should be done on the Cisco ESA to achieve this?
- A. Use the altrchost command to add a separate gateway for the new domain.
- B. Use the smtproutes command to configure a SMTP route for the new domain.
- C. Use the dsestconf command to add a separate destination for the new domain.
- D. Use the deli very config command to configure mail delivery for the new domain.
Answer: B
NEW QUESTION 58
Which two service problems can the Cisco Email Security Appliance solve? (Choose two.)
- A. Antispam
- B. URL filtering
- C. IPS
- D. DLP
Answer: A,D
NEW QUESTION 59
......
Pass Your Cisco Exam with 300-720 Exam Dumps: https://torrentpdf.practicedump.com/300-720-exam-questions.html