Cisco 300-720 Online Practice Questions and Exam Preparation

Cisco 300-720 Online Questions & Answers

• Question 91:

  What is the default HTTPS port when configuring spam quarantine on Cisco ESA?

  A. 83
  B. 82
  C. 443
  D. 80
  A. 83

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/b_ESA_Admin_Guide_ces_11_1/b_ESA_Admin_Guide_chapter_011111.pdf

• Question 92:

  An organization has strict rules for meeting specific criteria to approve certificate authorities. A Cisco ESA administrator within the organization is receiving complaints about failed inbound emails from a domain. The administrator is also seeing TLS certificate errors. What is the reason for this issue?

  A. Firewall inspection is preventing transmission of certificate data.
  B. The certificate authority is not on the system list.
  C. The TLSv1.0 protocol is not supported.
  D. The certificate chain is broken.
  D. The certificate chain is broken.

• Question 93:

  A network administrator enabled McAfee antivirus scanning on a Cisco ESA and configured the virus scanning action of "scan for viruses only." If the scanner finds a virus in an attachment for an incoming email, what action will be applied to this message?

  A. The attachment is dropped and replaced with a "Removed Attachment" file.
  B. The email and attachment are forwarded to the network administrator.
  C. The system will attempt to repair the attachment.
  D. No repair is attempted, and the attachment is either dropped or delivered.
  D. No repair is attempted, and the attachment is either dropped or delivered.

• Question 94:

  An engineer wants to utilize a digital signature in outgoing emails to validate to others that the email they are receiving was indeed sent and authorized by the owner of that domain.

  Which two components should be configured on the Cisco Secure Email Gateway appliance to achieve this? (Choose two.)

  A. SPF record
  B. DMARC verification profile
  C. PKI certificate
  D. Domain signing profile
  E. Public/Private keypair
  D. Domain signing profile

• Question 95:

  What is the order of virus scanning when multilayer antivirus scanning is configured?

  A. The default engine scans for viruses first and the McAfee engine scans for viruses second.
  B. The Sophos engine scans for viruses first and the McAfee engine scans for viruses second.
  C. The McAfee engine scans for viruses first and the default engine scans for viruses second.
  D. The McAfee engine scans for viruses first and the Sophos engine scans for viruses second.
  C. The McAfee engine scans for viruses first and the default engine scans for viruses second.

  ---

  Explanation/Reference:

  If you configure multi-layer anti-virus scanning, the Cisco appliance performs virus scanning with the McAfee engine first and the Sophos engine second. It scans messages using both engines, unless the McAfee engine detects a virus. If the McAfee engine detects a virus, the Cisco appliance performs the anti-virus actions (repairing, quarantining, etc.) defined for the mail policy.

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html

• Question 96:

  An engineer is reviewing the SMTP routing table on a Cisco ESA using the smtproutes CLI command and discovers an IPv6 route for 2620:104:4360:9232::23. What type of IPv6 route does this represent?

  A. Network route
  B. Subnet route
  C. Device route
  D. Prefix route
  C. Device route

• Question 97:

  DRAG DROP

  Drag and drop the actions from the left into the sequence on the right to configure directory harvest prevention in Cisco Secure Email Gateway.

  Select and Place:

  

  

• Question 98:

  Which component must be added to the content filter to trigger on failed SPF Verification or DKIM Authentication verdicts?

  A. status
  B. response
  C. parameter
  D. condition
  D. condition

• Question 99:

  An administrator needs to configure Cisco ESA to ensure that emails are sent and authorized by the owner of the domain. Which two steps must be performed to accomplish this task? (Choose two.)

  A. Generate keys.
  B. Create signing profile.
  C. Create Mx record.
  D. Enable SPF verification.
  E. Create DMARC profile.
  D. Enable SPF verification.
  E. Create DMARC profile.

• Question 100:

  A network engineer is editing the default DMARC verification profile on a Cisco ESA and must ensure that the configured Message Action in the profile matches the policy in the DMARC record. What must be set to achieve this result?

  A. "Message Action when the Policy in DMARC Record is Reject" to Reject
  B. "Message Action when the Policy in DMARC Record is None" to Quarantine
  C. "Message Action when the Policy in DMARC Record is None" to No Action
  D. "Message Action when the Policy in DMARC Record is Reject" to Quarantine
  A. "Message Action when the Policy in DMARC Record is Reject" to Reject