Cisco CCNP 300-720 Questions & Answers

• Question 31:

  Refer to the exhibit.

  

  What results from this filter configuration?

  A. Action is skipping all antispam checks for the mail.

  B. Action is applied to all mail from [email protected].

  C. Action is skipping all antivirus checks for the mail.

  D. Action is applied to all mail that has the subject "FW: Bounce Notification."

  Correct Answer: C

• Question 32:

  Refer to the exhibit.

  

  For improved security, an administrator wants to warn users about opening any links or attachments within an email. How must the administrator configure an HTML-coded message at the top of an email body to create this warning?

  A. Create a text resource type of Notification Template, change to code view to paste the HTML code into the text box, then use this text resource inside a content filter.

  B. Create a text resource type of Disclaimer Template, change to code view to paste the HTML code into the text box, then use this text resource inside a content filter.

  C. Create a text resource type of Disclaimer Template, past the HTML code into the text box, then use this text resource inside a content filter.

  D. Create a text resource type of Notification Template, past the HTML code into the text box, then use this text resource inside a content filter.

  Correct Answer: B

• Question 33:

  Refer to the exhibit.

  

  Which configuration allows the Cisco ESA to scan for executables inside the zip and apply the action as per the content filter?

  A. Modify the content filter to look for .exe filename instead of executable filetype.

  B. Configure the recursion depth to a higher value.

  C. Configure the maximum attachment size to a higher value.

  D. Modify the content filter to look for attachment filetype of compressed.

  Correct Answer: C

• Question 34:

  An engineer is configuring an SMTP authentication profile on a Cisco ESA which requires certificate verification. Which section must be configured to accomplish this goal?

  A. Mail Flow Policies

  B. Sending Profiles

  C. Outgoing Mail Policies

  D. Verification Profiles

  Correct Answer: A

• Question 35:

  Which component must be added to the content filter to trigger on failed SPF Verification or DKIM Authentication verdicts?

  A. status

  B. response

  C. parameter

  D. condition

  Correct Answer: D

• Question 36:

  An organization wants to use DMARC to improve its brand reputation by leveraging DNS records. Which two email authentication mechanisms are utilized during this process? (Choose two.)

  A. SPF

  B. DSTP

  C. DKIM

  D. TLS

  E. PKI

  Correct Answer: AC

  Reference: https://www.cisco.com/c/en/us/products/security/what-is-dmarc.html

• Question 37:

  An engineer is tasked with reviewing mail logs to confirm that messages sent from domain abc.com are passing SPF verification and being accepted by the Cisco ESA. The engineer notices that SPF verification is not being performed and that SPF is not being referenced in the logs for messages sent from domain abc.com.

  Why is the verification not working properly?

  A. SPF verification is disabled in the Recipient Access Table.

  B. SPF verification is disabled on the Mail Flow Policy.

  C. The SPF conformance level is set to SIDF compatible on the Mail Flow Policy.

  D. An SPF verification Content Filter has not been created.

  Correct Answer: D

• Question 38:

  Spreadsheets containing credit card numbers are being allowed to bypass the Cisco ESA.

  Which outgoing mail policy feature should be configured to catch this content before it leaves the network?

  A. file reputation filtering

  B. outbreak filtering

  C. data loss prevention

  D. file analysis

  Correct Answer: B

• Question 39:

  Refer to the exhibit.

  

  Which configuration on the scan behavior must be updated to allow the attachment to be scanned on the Cisco ESA?

  A. Add an additional mapping for attachment type for zip files.

  B. Enable assume match pattern if the email was not scanned for any reason.

  C. Increase the maximum recursion depth from 5 to a larger value.

  D. Increase the maximum attachment size to scan to a larger value.

  Correct Answer: A

• Question 40:

  Users have been complaining of a higher volume of emails containing profanity. The network administrator will need to leverage dictionaries and create specific conditions to reduce the number of inappropriate emails.

  Which two filters should be configured to address this? (Choose two.)

  A. message

  B. spam

  C. VOF

  D. sender group

  E. content

  Correct Answer: BE