Cisco CCNP 300-720 Questions & Answers

• Question 21:

  An administrator manipulated the subnet mask but was still unable to access the user interface. How must the administrator access the appliance to perform the initial configuration?

  A. Use the data 2 port.

  B. Use the serial or console port.

  C. Use the data 1 port.

  D. Use the management port.

  Correct Answer: B

• Question 22:

  A Cisco ESA administrator is creating a Mail Flow Policy to receive outbound email from Microsoft Exchange. Which Connection Behavior must be selected to properly process the messages?

  A. Delay

  B. Accept

  C. Relay

  D. Reject

  Correct Answer: C

• Question 23:

  An administrator needs to configure a Cisco ESA to block specific domains based on their reputation. Which service within the Cisco ESA should be utilized to accomplish this task?

  A. Receiving SMTP Policy

  B. Data Loss Prevention

  C. Anti-Virus

  D. Sender Group

  Correct Answer: A

• Question 24:

  An administrator notices that the Cisco ESA delivery queue is consistently full. After further investigation, it is determined that the IP addresses currently in use by the Cisco ESA are being rate-limited by some destinations. The administrator creates a new interface with an additional IP address using virtual gateway technology, but the issue is not solved. Which configuration change resolves the issue?

  A. Use the CLI command alt-src-host to set the new interface as a possible delivery candidate.

  B. Use the CLI command loadbalance auto to enable mail delivery over all interfaces.

  C. Use the CLI command deliveryconfig to set the new interface as the primary interface for mail delivery.

  D. Use the CLI command altsrchost to set the new interface as the source IP address for all mail.

  Correct Answer: B

• Question 25:

  An administrator needs to configure Cisco ESA to ensure that emails are sent and authorized by the owner of the domain. Which two steps must be performed to accomplish this task? (Choose two.)

  A. Generate keys.

  B. Create signing profile.

  C. Create Mx record.

  D. Enable SPF verification.

  E. Create DMARC profile.

  Correct Answer: DE

• Question 26:

  What is the purpose of Cisco Email Encryption on Cisco ESA?

  A. to ensure anonymity between a recipient and MTA

  B. to ensure integrity between a sender and MTA

  C. to authenticate direct communication between a sender and Cisco ESA

  D. to ensure privacy between Cisco ESA and MTA

  Correct Answer: D

• Question 27:

  A Cisco ESA administrator has noticed that new messages being sent to the Centralized Policy Quarantine are being released after one hour. Previously, they were being held for a day before being released.

  What was configured that caused this to occur?

  A. The retention period was changed to one hour.

  B. The threshold settings were set to override the clock settings.

  C. The retention period was set to default.

  D. The threshold settings were set to default.

  Correct Answer: D

• Question 28:

  What are organizations trying to address when implementing a SPAM quarantine?

  A. true positives

  B. false negatives

  C. false positives

  D. true negatives

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_0100000.html#con_1482874

• Question 29:

  Which two Cisco ESA features are used to control email delivery based on the sender? (Choose two.)

  A. incoming mail policies

  B. spam quarantine

  C. outbreak filter

  D. safelists

  E. blocklists

  Correct Answer: DE

• Question 30:

  Refer to the exhibit.

  

  An administrator has configured File Reputation and File Analysis on the Cisco ESA; however, is does not function as expected. What must be configured on the Cisco ESA for this to function?

  A. Upload the Root CA certificate for the File Reputation cloud to the Cisco ESA.

  B. Open port 443 on the firewall for the Cisco ESA to connect to the File Reputation cloud.

  C. Restart the File Reputation service to force the scanning engine to connect to the File Reputation cloud.

  D. Configure the Cisco ESA to use SSL for the connection to the File Reputation server.

  Correct Answer: A