Cisco 300-720 Online Practice Questions and Exam Preparation

Cisco 300-720 Online Questions & Answers

• Question 81:

  Which action on the Cisco ESA provides direct access to view the safelist/blocklist?

  A. Show the SLBL cache on the CLI.
  B. Monitor Incoming/Outgoing Listener.
  C. Export the SLBL to a .csv file.
  D. Debug the mail flow policy.
  C. Export the SLBL to a .csv file.

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117922-technote-esa-00.html

• Question 82:

  Email encryption is configured on a Cisco ESA that uses CRES.

  Which action is taken on a message when CRES is unavailable?

  A. It is requeued.
  B. It is sent in clear text.
  C. It is dropped and an error message is sent to the sender.
  D. It is encrypted by a Cisco encryption appliance.
  B. It is sent in clear text.

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117863-configure-esa-00.html

• Question 83:

  A recent engine update was pulled down for graymail and has caused the service to start crashing. It is critical to fix this as quickly as possible. What must be done to address this issue?

  A. Roll back to a previous version of the engine from the Services Overview page.
  B. Roll back to a previous version of the engine from the System Health page.
  C. Download another update from the IMS and Graymail page.
  D. Download another update from the Service Updates page.
  A. Roll back to a previous version of the engine from the Services Overview page.

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_0100010.html#task_9F07A032042F48C6AEDB69D325CD3C5F

• Question 84:

  DRAG DROP

  Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.

  Select and Place:

  

  

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_010101.html

• Question 85:

  A Cisco ESA is configured such that emails with a reputation score above -6 are logged and those with a score below -6 are logged, encrypted, and then delivered. An email body contains a shortened URL that exceeds the nested shortened URLs limit. Which action is taken against the email?

  A. It is encrypted but not logged.
  B. It is logged but not encrypted.
  C. It is logged and dropped.
  D. It is logged and encrypted.
  A. It is encrypted but not logged.

• Question 86:

  A trusted partner of an organization recently experienced a new campaign that was leveraging JavaScript attachments to trick users into executing malware. As a result, they created a local policy to deny messages with JavaScript attachments. Which action should the administrator of the organization take to ensure encrypted communications are delivered to the intended partner recipient?

  A. Insert the X-PostX-Use-Script' header with a value of false to the encrypted messages
  B. Select JavaScript-free' option within the Cisco Secure Email Encryption Service Add-in
  C. Create an outgoing content filter and add the Encrypt and Deliver Nov/ action with Use-Script option deselected
  D. Create a new encryption profile and deselect the 'Use-Script' envelope settings option
  D. Create a new encryption profile and deselect the 'Use-Script' envelope settings option

  ---

  Explanation/Reference:

• Question 87:

  Refer to the exhibit.

  

  An administrator has configured File Reputation and File Analysis on the Cisco ESA; however, is does not function as expected. What must be configured on the Cisco ESA for this to function?

  A. Upload the Root CA certificate for the File Reputation cloud to the Cisco ESA.
  B. Open port 443 on the firewall for the Cisco ESA to connect to the File Reputation cloud.
  C. Restart the File Reputation service to force the scanning engine to connect to the File Reputation cloud.
  D. Configure the Cisco ESA to use SSL for the connection to the File Reputation server.
  A. Upload the Root CA certificate for the File Reputation cloud to the Cisco ESA.

• Question 88:

  Which feature must be activated on a Cisco ESA to combat backscatter?

  A. Graymail Detection
  B. Bounce Profile
  C. Forged Email Detection
  D. Bounce Verification
  D. Bounce Verification

• Question 89:

  Which feature must be enabled first when URL logging is configured on a Cisco ESA?

  A. antivirus
  B. antispam
  C. senderbase reputation filter
  D. virus outbreak filter
  D. virus outbreak filter

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote-esa-00.html#:~:text=In%20order%20to%20implement%20URL,CLI%20by%20the%20ESA%20administrator.

• Question 90:

  An organization has multiple Cisco ESA devices deployed, resulting in several spam quarantines to manage. To manage the quarantined messages, the administrator enabled the centralized spam quarantine on the Cisco SMA and configured the external spam quarantine on the Cisco ESA devices. However, messages are still being directed to the local quarantine on the Cisco ESA devices. What change is necessary to complete the configuration?

  A. Modify the incoming mail policies on the Cisco ESA devices to redirect to the external quarantine.
  B. Disable the external spam quarantine on the Cisco ESA devices.
  C. Disable the local spam quarantine on the Cisco ESA devices.
  D. Modify the external spam quarantine settings on the Cisco ESA devices and change the port to 25.
  C. Disable the local spam quarantine on the Cisco ESA devices.