300-720 Practice Exam Questions and Answers

Refer to the exhibit.

A network engineer must set up a content filter to find any messages that failed SPF and send them into quarantine The content filter has been set up and enabled, but all messages except those that have failed SPF are being sent into quarantine. Which section of the filter must be modified to correct this behavior?

Email encryption is configured on a Cisco ESA that uses CRES.

Which action is taken on a message when CRES is unavailable?

What are the two different phases in the process of Cisco Secure Email Gateway performing S/MIME encryption? (Choose two.)

Which restriction is in place for end users accessing the spam quarantine on Cisco Secure Email Gateway appliances?

A network administrator notices that there are a high number of queries to the LDAP server. The mail logs show an entry “550 Too many invalid recipients | Connection closed by foreign host.”

Which feature must be used to address this?

An engineer is configuring an SMTP authentication profile on a Cisco ESA which requires certificate verification.

Which section must be configured to accomplish this goal?

Which type of attack is prevented by configuring file reputation filtering and file analysis features?

The CEO sent an email indicating that all emails containing a string of 123ABCDEFGHJ cannot be delivered and must be sent into quarantine for further inspection. Given the requirement, which regular expression should be used to match on that criteria?

What is the default behavior of any listener for TLS communication?

What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?

Refer to the exhibit.

A network engineer must set up a content filter to find any messages that failed SPF and send them into quarantine The content filter has been set up and enabled, but all messages except those that have failed SPF are being sent into quarantine. Which section of the filter must be modified to correct this behavior?

Drag and drop the graymail descriptions from the left onto the verdict categories they belong to on the right.

Which two steps configure Forged Email Detection? (Choose two.)

An organization has a strict policy on URLs embedded in emails. The policy allows visibility into what the URL is but does not allow the user to click it. Which action must be taken to meet the requirements of the security policy?

Which functionality is impacted if the assigned certificate under one of the IP interfaces is modified?

Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.

An administrator notices that the Cisco Secure Email Gateway delivery queue on an appliance is consistently full. After further investigation, it is determined that the IP addresses currently in use by appliance are being rate-limited by some destinations. The administrator creates a new interface with an additional IP address using virtual gateway technology, but the issue is not solved Which configuration change resolves the issue?

When email authentication is configured on Cisco ESA, which two key types should be selected on the signing profile? (Choose two.)

Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?

Drag and drop authentication options for End-User Quarantine Access from the left onto the corresponding configuration steps on the right.

A network administrator is modifying an outgoing mail policy to enable domain protection for the organization. A DNS entry is created that has the public key.

Which two headers will be used as matching criteria in the outgoing mail policy? (Choose two.)

A Cisco ESA administrator has noticed that new messages being sent to the Centralized Policy Quarantine are being released after one hour. Previously, they were being held for a day before being released.

What was configured that caused this to occur?

Which action on the Cisco ESA provides direct access to view the safelist/blocklist?

What are organizations trying to address when implementing a SPAM quarantine?

Which two are configured in the DMARC verification profile? (Choose two.)

An administrator needs to configure Cisco ESA to ensure that emails are sent and authorized by the owner of the domain. Which two steps must be performed to accomplish this task? (Choose two.)

What are two phases of the Cisco ESA email pipeline? (Choose two.)

Which two actions are configured on the Cisco ESA to query LDAP servers? (Choose two.)

Which two features of Cisco Email Security are added to a Sender Group to protect an organization against email threats? (Choose two.)

Which feature utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco ESA?

Which cloud service provides a reputation verdict for email messages based on the sender domain and other attributes?

Which SMTP extension does Cisco ESA support for email security?

Which two action types are performed by Cisco ESA message filters? (Choose two.)

A Cisco Secure Email Gateway administrator recently enabled the Outbreak Filters Global Service Setting to detect Viral as well as Non-Viral threat detection, with no detection of Non-viral threats after 24 hours of monitoring Outbreak Filters What is the reason that Non-Viral threat detection is not detecting any positive verdicts?

When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)

An organization wants to designate help desk personnel to assist with tickets that request the release of messages from the spam quarantine because company policy does not permit direct end-user access to the quarantine. Which two roles must be used to allow help desk personnel to release messages while restricting their access to make configuration changes in the Cisco Secure Email Gateway? (Choose two.)

What is the default behavior of any listener for TLS communication?

Which Cisco ESA security service is configured only through an outgoing mail policy?

Refer to the exhibit. Which configuration on the scan behavior must be updated to allow the attachment to be scanned on the Cisco ESA?

What is the default HTTPS port when configuring spam quarantine on Cisco ESA?

Refer to the exhibit. How should this configuration be modified to stop delivering Zero Day malware attacks?

When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

Which setting affects the aggressiveness of spam detection?

When URL logging is configured on a Cisco ESA, which feature must be enabled first?