Cisco 300-720 Online Practice Questions and Exam Preparation

Cisco 300-720 Online Questions & Answers

• Question 21:

  Refer to the exhibit.

  

  Which additional configuration action must be taken to protect against Directory Harvest Attacks?

  A. When LDAP Queries are configured, Directory Harvest Attack Prevention is enabled by default.
  B. In the LDAP Server profile, configure Directory Harvest Attack Prevention.
  C. In the Listener Settings, modify the LDAP Queries configuration to use the Work Queue.
  D. In the mail flow policy, configure Directory Harvest Attack Prevention.
  D. In the mail flow policy, configure Directory Harvest Attack Prevention.

• Question 22:

  An administrator is managing multiple Cisco ESA devices and wants to view the quarantine emails from all devices in a central location. How is this accomplished?

  A. Disable the VOF feature before sending SPAM to the external quarantine.
  B. Configure a mail policy to determine whether the message is sent to the local or external quarantine.
  C. Disable the local quarantine before sending SPAM to the external quarantine.
  D. Configure a user policy to determine whether the message is sent to the local or external quarantine.
  B. Configure a mail policy to determine whether the message is sent to the local or external quarantine.

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_0100000.html#task_1749146

• Question 23:

  DRAG DROP

  An engineer must enable SIDF for a mail flow policy on an incoming listener in Cisco Secure Email Gateway.

  Drag and drop the actions from the left into the sequence on the right to meet the requirement

  Select and Place:

  

  

• Question 24:

  What is a category for classifying graymail?

  A. Priority
  B. Marketing
  C. Malicious
  D. Spam
  B. Marketing

• Question 25:

  Which restriction is in place for end users accessing the spam quarantine on Cisco ESA devices?

  A. The end user must be assigned to the Guest role.
  B. Access via a link in a notification in mandatory.
  C. Authentication is required when accessing via a link in a notification.
  D. Direct access via web browser requires authentication.
  A. The end user must be assigned to the Guest role.

• Question 26:

  What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?

  A. provisioned email encryption profile
  B. message encryption from a content filter that select "Message Encryption" over TLS
  C. message encryption from the mail flow policies with "CRES" selected
  D. content filter to forward the email to the Cisco Registered Envelope server
  B. message encryption from a content filter that select "Message Encryption" over TLS

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010010.html

• Question 27:

  What is a valid content filter action?

  A. decrypt on delivery
  B. quarantine
  C. skip antispam
  D. archive
  B. quarantine

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01010.html#con_1158022

• Question 28:

  What are two primary components of content filters? (Choose two.)

  A. conditions
  B. subject
  C. content
  D. actions
  E. policies
  A. conditions
  D. actions

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/b_ESA_Admin_Guide_ces_11_1/b_ESA_Admin_Guide_chapter_01010.pdf

• Question 29:

  Which two Cisco ESA features are used to control email delivery based on the sender? (Choose two.)

  A. incoming mail policies
  B. spam quarantine
  C. outbreak filter
  D. safelists
  E. blocklists
  D. safelists
  E. blocklists

• Question 30:

  Refer to the exhibit.

  

  Refer to the exhibit. A security engineer must configure a Cisco Secure Email Gateway to ensure that encryption is enabled and the configured profile is provisioned.

  Which command must be used?

  A. profiles
  B. setup
  C. check encryption
  D. provision
  D. provision