Cisco 300-720 Online Practice Questions and Exam Preparation

Cisco 300-720 Online Questions & Answers

• Question 11:

  DRAG DROP

  An engineer must configure a policy quarantine in Cisco Secure Email Gateway. The retention time must be 7 days and [email protected] must have access to the quarantine.

  Drag and drop the actions from the left into the sequence on the right to meet the requirements.

  Select and Place:

  

  

• Question 12:

  Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)

  A. The filters command executed from the CLI is used to configure the message filters.
  B. Message filters configuration within the web user interface is located within Incoming Content Filters.
  C. The filterconfig command executed from the CLI is used to configure message filters.
  D. Message filters can be configured only from the CLI.
  E. Message filters can be configured only from the web user interface.
  A. The filters command executed from the CLI is used to configure the message filters.
  D. Message filters can be configured only from the CLI.

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213940-esa-using-a-message-filter-to-take-act.html

• Question 13:

  What is a capability of content filters?

  A. to review messages based on email subject
  B. to perform antispam scanning
  C. to scan incoming or outgoing messages
  D. to apply rules before message filters
  C. to scan incoming or outgoing messages

• Question 14:

  Which suboption must be selected when LDAP is configured for Spam Quarantine End-User Authentication?

  A. Designate as the active query
  B. Update Frequency
  C. Server Priority
  D. Entity ID
  A. Designate as the active query

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-5/user_guide/b_SMA_Admin_Guide_11_5/b_SMA_Admin_Guide_11_5_chapter_01010.html

• Question 15:

  Refer to the exhibit.

  

  Which configuration allows the Cisco ESA to scan for executables inside the zip and apply the action as per the content filter?

  A. Modify the content filter to look for .exe filename instead of executable filetype.
  B. Configure the recursion depth to a higher value.
  C. Configure the maximum attachment size to a higher value.
  D. Modify the content filter to look for attachment filetype of compressed.
  C. Configure the maximum attachment size to a higher value.

• Question 16:

  When virtual gateways are configured, which two distinct attributes are allocated to each virtual gateway address? (Choose two.)

  A. domain
  B. IP address
  C. DNS server address
  D. DHCP server address
  E. external spam quarantine
  A. domain
  B. IP address

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118542-qa-esa-00.html

• Question 17:

  A Cisco ESA administrator recently enabled the Outbreak Filters Global Service Setting to detect Viral as well as Non-Viral threat detection, with no detection of Non-Viral threats after 24 hours of monitoring Outbreak Filters. What is the reason that Non-Viral threat detection is not detecting any positive verdicts?

  A. The Outbreak Filters option Graymail Header must be enabled.
  B. The Outbreak Filters option URL Rewriting must be enabled.
  C. Non-Viral threat detection requires AntiSpam or Intelligent Multi-Scan enablement to properly function.
  D. Non-Viral threat detection requires AntiVirus or AMP enablement to properly function.
  C. Non-Viral threat detection requires AntiSpam or Intelligent Multi-Scan enablement to properly function.

• Question 18:

  An engineer is configuring an SMTP authentication profile on a Cisco ESA which requires certificate verification. Which section must be configured to accomplish this goal?

  A. Mail Flow Policies
  B. Sending Profiles
  C. Outgoing Mail Policies
  D. Verification Profiles
  A. Mail Flow Policies

• Question 19:

  Refer to the exhibit.

  

  How should this configuration be modified to stop delivering Zero Day malware attacks?

  A. Change Unscannable Action from Deliver As Is to Quarantine.
  B. Change File Analysis Pending action from Deliver As Is to Quarantine.
  C. Configure mailbox auto-remediation.
  D. Apply Prepend on Modify Message Subject under Malware Attachments.
  C. Configure mailbox auto-remediation.

• Question 20:

  Which SMTP extension does Cisco ESA support for email security?

  A. ETRN
  B. UTF8SMTP
  C. PIPELINING
  D. STARTTLS
  A. ETRN
  D. STARTTLS