Cisco 300-720 Online Practice Questions and Exam Preparation

Cisco 300-720 Online Questions & Answers

• Question 61:

  What are the two different phases in the process of Cisco Secure Email Gateway performing S/MIME encryption? (Choose two.)

  A. Attach the encrypted public key to the message
  B. Encrypt the message body using the session key
  C. Send the encrypted message to the sender
  D. Attach the encrypted symmetric key to the message
  E. Create a pseudo-random session key
  D. Attach the encrypted symmetric key to the message
  E. Create a pseudo-random session key

  ---

  Explanation/Reference:

• Question 62:

  A Cisco ESA administrator was notified that a user was not receiving emails from a specific domain. After reviewing the mail logs, the sender had a negative sender-based reputation score. What should the administrator do to allow inbound email from that specific domain?

  A. Create a new inbound mail policy with a message filter that overrides Talos.
  B. Ask the user to add the sender to the email application's allow list.
  C. Modify the firewall to allow emails from the domain.
  D. Add the domain into the allow list.
  D. Add the domain into the allow list.

• Question 63:

  What is the purpose of checking the CRL during SMTP authentication on a Cisco ESA?

  A. Check if the certificate is not revoked.
  B. Confirm that corresponding CA is present.
  C. Verify the common name matches user ID.
  D. Validate the date to check if the certificate is still valid.
  A. Check if the certificate is not revoked.

• Question 64:

  An engineer must ensure that email sent from *@cisco.com is not sent to the spam quarantine on a Cisco Secure Email Gateway.

  What must be configured on the Secure Email Gateway?

  A. content filter
  B. URL filtering
  C. S/MIME
  D. safelist
  D. safelist

• Question 65:

  Refer to the exhibit. An engineer is trying to connect to a Cisco ESA using SSH and has been unsuccessful. Upon further inspection, the engineer notices that there is a loss of connectivity to the neighboring switch.

  

  Which connection method should be used to determine the configuration issue?

  A. Telnet
  B. HTTPS
  C. Ethernet
  D. serial
  D. serial

• Question 66:

  What is a benefit of deploying Cisco Secure Email and Web Manager?

  A. centralized management of software updates for Cisco Secure Email Gateway
  B. centralized management of logs for Cisco Secure Email Gateway
  C. centralized management of quarantined email
  D. centralized management of botnet directories
  C. centralized management of quarantined email

  ---

  Explanation/Reference:

  One of the benefits of deploying Cisco Secure Email and Web Manager is that it provides centralized management of quarantined email for multiple Cisco Secure Email Gateway appliances. The administrator can use the Cisco Secure Email and Web Manager to view, search, release, delete, or forward quarantined messages from a single web interface. References: [Cisco Secure Email and Web Manager User Guide - Configuring Centralized Spam Quarantine]

• Question 67:

  A company's CFO is requesting the email administrator create an exception for graymail from a certain yoga studio's weekly newsletter.

  Which category of graymail does this fall under?

  A. Mass
  B. Sales
  C. Social Network
  D. Marketing
  D. Marketing

• Question 68:

  What is needed to sign outbound emails using Domain Keys Identified Mail after a signing profile is created in the Cisco Secure Email Gateway?

  A. Configure in destination controls.
  B. Enable DKIM in the mail flow policy.
  C. A signing profile referencing the sender domain is sufficient.
  D. Enable DKIM in an outbound content filter.
  B. Enable DKIM in the mail flow policy.

• Question 69:

  A company has recently updated their security policy and now wants to drop all email messages larger than 100 MB coming from external sources. The Cisco Secure Email Gateway is LDAP integrated and all employee accounts are in the

  group "Employees".

  Which filter rule configuration provides the desired outcome?

  A. if (mail-from-group == 'Employees') and (body-size > "100M") {drop()}
  B. if (mail-from-group != 'Employees') and (body-size > 100M) {drop();}
  C. if (mail-from-group == 'Employees') and (body-size > 100M) {bounce();}
  D. if ('mail-from-group != Employees') and (body-size > 100M) {drop();}
  A. if (mail-from-group == 'Employees') and (body-size > "100M") {drop()}

  ---

  Explanation/Reference:

• Question 70:

  When email authentication is configured on Cisco ESA, which two key types should be selected on the signing profile? (Choose two.)

  A. DKIM
  B. Public Keys
  C. Domain Keys
  D. Symmetric Keys
  E. Private Keys
  A. DKIM
  C. Domain Keys

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213939-esa-configure-dkim-signing.html