Cisco 300-720 Online Practice Questions and Exam Preparation

Cisco 300-720 Online Questions & Answers

• Question 171:

  When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?

  A. Enabling the End-User Safelist/Blocklist feature
  B. Spam Quarantine External Authentication Query
  C. Spam Quarantine End-User Authentication Query
  D. Spam Quarantine Alias Consolidation Query
  C. Spam Quarantine End-User Authentication Query

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure-esa-00.html

• Question 172:

  Which type of attack is prevented by configuring file reputation filtering and file analysis features?

  A. denial of service
  B. zero-day
  C. backscatter
  D. phishing
  B. zero-day

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010000.html#con_1809885

• Question 173:

  When URL logging is configured on a Cisco ESA, which feature must be enabled first?

  A. antivirus
  B. antispam
  C. virus outbreak filter
  D. senderbase reputation filter
  C. virus outbreak filter

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote-esa-00.html (note under enable url filtering)

• Question 174:

  Refer to the exhibit.

  

  For improved security, an administrator wants to warn users about opening any links or attachments within an email. How must the administrator configure an HTML-coded message at the top of an email body to create this warning?

  A. Create a text resource type of Notification Template, change to code view to paste the HTML code into the text box, then use this text resource inside a content filter.
  B. Create a text resource type of Disclaimer Template, change to code view to paste the HTML code into the text box, then use this text resource inside a content filter.
  C. Create a text resource type of Disclaimer Template, past the HTML code into the text box, then use this text resource inside a content filter.
  D. Create a text resource type of Notification Template, past the HTML code into the text box, then use this text resource inside a content filter.
  B. Create a text resource type of Disclaimer Template, change to code view to paste the HTML code into the text box, then use this text resource inside a content filter.

• Question 175:

  Which feature utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco ESA?

  A. SenderBase Reputation Filtering
  B. Connection Reputation Filtering
  C. Talos Reputation Filtering
  D. SpamCop Reputation Filtering
  A. SenderBase Reputation Filtering

• Question 176:

  An engineer tries to implement phishing simulations to test end users, but they are being blocked by the Cisco ESA. Which two components, when added to the allow list, allow these simulations to bypass antispam scanning? (Choose two.)

  A. receivers
  B. domains
  C. reputation score
  D. spf check
  E. senders
  C. reputation score
  E. senders

• Question 177:

  A security administrator deployed a Cisco Secure Email Gateway appliance with a mail policy configured to store suspected spam for review. The appliance is the DMZ and only the standard HTTP/HTTPS ports are allowed by the firewall. An administrator wants to ensure that users can view any suspected spam that was blocked. Which action must be taken to meet this requirement?

  A. Enable the external Spam Quarantine and enter the IP address and port for the Secure Email and Web Manager
  B. Enable the Spam Quarantine and leave the default settings unchanged
  C. Enable End-User Quarantine Access and point to an LDAP server for authentication
  D. Enable the Spam Quarantine and specify port 80 for HTTP and port 443 for HTTPS
  C. Enable End-User Quarantine Access and point to an LDAP server for authentication

  ---

  Explanation/Reference:

  Enabling End-User Quarantine Access and pointing to an LDAP server for authentication is the action that must be taken to meet this requirement. End-User Quarantine Access is a feature that allows users to access their personal quarantine

  on Cisco ESA using their email address and password, without requiring an administrator account or access to Secure Email and Web Manager.

  To enable End-User Quarantine Access on Cisco ESA, the administrator can follow these steps:

  Select Security Services > IronPort Anti-Spam > End User Safelist/Blocklist Settings and click Edit Settings.

  Under End User Quarantine Access, select Enable End User Quarantine Access.

  Under Authentication Server, select LDAP Server from the drop-down menu and choose an LDAP server profile from the drop-down menu.

  Click Submit.

• Question 178:

  The CEO sent an email indicating that all emails containing a string of 123ABCDEFGHJ cannot be delivered and must be sent into quarantine for further inspection. Given the requirement, which regular expression should be used to match on that criteria?

  A. \d{3}[A璟]{9}
  B. {3}\d{9}[A璟]
  C. \w{3}[A璟]{9}
  D. \\D{3}[A璟]{9}
  B. {3}\d{9}[A璟]

• Question 179:

  What is the default port to deliver emails from the Cisco ESA to the Cisco SMA using the centralized Spam Quarantine?

  A. 8025
  B. 6443
  C. 6025
  D. 8443
  C. 6025

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure-esa-00.html

• Question 180:

  When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

  A. 30 seconds
  B. 90 seconds
  C. 60 seconds
  D. 120 seconds
  C. 60 seconds

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html