Cisco 300-720 Online Practice Questions and Exam Preparation

Cisco 300-720 Online Questions & Answers

• Question 161:

  When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)

  A. redirect
  B. return
  C. drop
  D. delay
  E. abandon
  A. redirect
  D. delay

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01110.html

• Question 162:

  An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level."

  What is the cause of this error?

  A. Content filters are configured at the machine-level on esa1.
  B. DLP is configured at the cluster-level on esa2.
  C. DLP is configured at the domain-level on esa1.
  D. DLP is not configured on host1.
  D. DLP is not configured on host1.

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118026-technote-esa-00.html

• Question 163:

  Which two features are applied to either incoming or outgoing mail policies? (Choose two.)

  A. Indication of Compromise
  B. application filtering
  C. outbreak filters
  D. sender reputation filtering
  E. antivirus
  C. outbreak filters
  E. antivirus

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html

• Question 164:

  An administrator notices that the Cisco ESA delivery queue is consistently full. After further investigation, it is determined that the IP addresses currently in use by the Cisco ESA are being rate-limited by some destinations. The administrator creates a new interface with an additional IP address using virtual gateway technology, but the issue is not solved. Which configuration change resolves the issue?

  A. Use the CLI command alt-src-host to set the new interface as a possible delivery candidate.
  B. Use the CLI command loadbalance auto to enable mail delivery over all interfaces.
  C. Use the CLI command deliveryconfig to set the new interface as the primary interface for mail delivery.
  D. Use the CLI command altsrchost to set the new interface as the source IP address for all mail.
  B. Use the CLI command loadbalance auto to enable mail delivery over all interfaces.

• Question 165:

  An engineer must configure Cisco Secure Email Gateway to scan all email from the HR department for viruses. The McAfee scanning engine must be used, and a log entry must be added for messages that are marked Unscannable after a timeout of 45 seconds. These configurations were performed already:

  1. Enable antivirus scanning on the email gateway.

  2. Create a mail policy for the HR department.

  Which two actions must be taken next to meet the requirement? (Choose two.)

  A. Set the virus scanning timeout value to 45 seconds.
  B. From the Message Scanning settings, enable the dropping of attachments.
  C. From the Message Scanning settings, add an X-IronPort-AV Header.
  D. From the Message Handling settings, enable Encrypted Message Handling.
  E. Set the antivirus update timeout value to 45 seconds.
  A. Set the virus scanning timeout value to 45 seconds.

• Question 166:

  Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)

  A. load balancing
  B. SLA monitor
  C. active-standby
  D. failover
  E. active-active
  A. load balancing
  D. failover

  ---

  Explanation/Reference:

  You can enter multiple host names to configure the LDAP servers for failover or load-balancing. Separate multiple entries with commas.

  Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/sma_user_guide/b_SMA_Admin_Guide_ces_11/b_SMA_Admin_Guide_chapter_01010.html

• Question 167:

  Which two components form the graymail management solution in Cisco ESA? (Choose two.)

  A. cloud-based unsubscribe service
  B. uniform unsubscription management interface for end users
  C. secure subscribe option for end users
  D. integrated graymail scanning engine
  E. improved mail efficacy
  A. cloud-based unsubscribe service
  D. integrated graymail scanning engine
  E. improved mail efficacy

• Question 168:

  A network engineer is reviewing the record presented.

  Name: big-email._domainkey.mywebsite.

  com Data: v=DKIM1; k=rsa; p= REPLACE_WITH_YOUR_PUBLIC_KEY Which type of DNS record would contain the record as per the DKIM public key RFC 6376?

  A. TXT
  B. PTR
  C. MX
  D. SRV
  A. TXT

• Question 169:

  Which process is skipped when an email is received from safedomain.com, which is on the safelist?

  A. message filter
  B. antivirus scanning
  C. outbreak filter
  D. antispam scanning
  A. message filter

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/214269-filter-to-handle-messages-that-skipped-d.html

• Question 170:

  DRAG DROP

  Drag and drop the graymail descriptions from the left onto the verdict categories they belong to on the right.

  Select and Place:

  

  

  ---

  Explanation/Reference: