Cisco 300-720 Online Practice Questions and Exam Preparation

Cisco 300-720 Online Questions & Answers

• Question 141:

  A network engineer is implementing a virus outbreak filter on a Cisco ESA by using the Outbreak Filters feature with plans to perform an additional scan by using a content filter. Which action must be taken by the Outbreak Filters?

  A. Scan processed messages by using two engines simultaneously.
  B. Send a copy of messages to quarantine.
  C. Send processed messages to the Cisco ESA.
  D. Scan processed messages by using a secondary instance of the Cisco ESA.
  C. Send processed messages to the Cisco ESA.

• Question 142:

  How does the graymail safe unsubscribe feature function?

  A. It strips the malicious content of the URI before unsubscribing.
  B. It checks the URI reputation and category and allows the content filter to take an action on it.
  C. It redirects the end user who clicks the unsubscribe button to a sandbox environment to allow a safe unsubscribe.
  D. It checks the reputation of the URI and performs the unsubscribe process on behalf of the end user.
  D. It checks the reputation of the URI and performs the unsubscribe process on behalf of the end user.

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200383-Graymail-Detection-and-Safe-Unsubscribin.html

• Question 143:

  An organization has a strict policy on URLs embedded in emails. The policy allows visibility into what the URL is but does not allow the user to click it. Which action must be taken to meet the requirements of the security policy?

  A. Defang the URL.
  B. Enable the URL quarantine policy.
  C. Replace the URL with text.
  D. Redirect the URL to the Cisco security proxy.
  D. Redirect the URL to the Cisco security proxy.

• Question 144:

  An organization wants to use DMARC to improve its brand reputation by leveraging DNS records. Which two email authentication mechanisms are utilized during this process? (Choose two.)

  A. SPF
  B. DSTP
  C. DKIM
  D. TLS
  E. PKI
  A. SPF
  C. DKIM

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/products/security/what-is-dmarc.html

• Question 145:

  An engineer is tasked with creating a content filter to catch attachments, including credit card numbers, and hold them for review until further action is taken. Which component on a Cisco ESA must be configured to meet this requirement?

  A. Spam Quarantine
  B. Outbreak Filter
  C. Policy Quarantine
  D. Content Filter
  D. Content Filter

• Question 146:

  DRAG DROP

  Drag and drop the Cisco ESA reactions to a possible DLP from the left onto the correct action types on the right.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Reference:

  https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010001.html (message actions)

• Question 147:

  Which action is a valid fallback when a client certificate is unavailable during SMTP authentication on Cisco ESA?

  A. LDAP Query
  B. SMTP AUTH
  C. SMTP TLS
  D. LDAP BIND
  B. SMTP AUTH

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011011.html

• Question 148:

  An administrator manipulated the subnet mask but was still unable to access the user interface. How must the administrator access the appliance to perform the initial configuration?

  A. Use the data 2 port.
  B. Use the serial or console port.
  C. Use the data 1 port.
  D. Use the management port.
  B. Use the serial or console port.

• Question 149:

  Which functionality is impacted if the assigned certificate under one of the listeners is modified?

  A. emails being received by the Cisco Secure Email Gateway
  B. HTTPS traffic when connecting to the web user interface of the Cisco Secure Email Gateway
  C. traffic between the Cisco Secure Email Gateway and the LDAP server
  D. access to Cisco Secure Email Gateway from external sources
  A. emails being received by the Cisco Secure Email Gateway

• Question 150:

  Which global setting is configured under Cisco ESA Scan Behavior?

  A. minimum attachment size to scan
  B. attachment scanning timeout
  C. actions for unscannable messages due to attachment type
  D. minimum depth of attachment recursion to scan
  B. attachment scanning timeout

  ---

  Explanation/Reference:

  Reference: https://community.cisco.com/t5/email-security/cisco-ironport-esa-security-services-scan-behavior-impact-on-av/td-p/3923243