Cisco Securing Email with Cisco Email Security Appliance - 300-720 FREE EXAM DUMPS QUESTIONS & ANSWERS]

Question 1

An engineer must limit responses from the gateway that are directed to invalid email addresses.
How should the LDAP server be configured to accomplish this goal?

A. Validate the sender email address via an LDAP query during the SMTP conversation. B. Validate the sender email address via SMTP Call-Ahead to query an external SMTP server. C. Limit the number of invalid responses per recipient to stop responses after crossing the threshold. D. Limit the number of invalid recipients per sender to stop responses after crossing the threshold.

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 2

A Cisco ESA administrator must provide outbound email authenticity and configures a DKIM signing profile to handle this task. What is the next step to allow this organization to use DKIM for their outbound email?

A. Configure the Trusted Sender Group message authenticity policy. B. Export the DNS TXT record to provide to the DNS registrar. C. Import the DNS record of the service provider into the Cisco ESA. D. Enable the DKIM service checker.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 3

During troubleshooting, Message Tracking shows "Dropped by Content Filter." What should the administrator conclude?

A. LDAP verification failed B. The remote server rejected the message C. The message matched a Content Filter action configured to drop mail D. Anti-virus deleted the message automatically

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 4

How does the graymail safe unsubscribe feature function?

A. It redirects the end user who clicks the unsubscribe button to a sandbox environment to allow a safe unsubscribe. B. It checks the reputation of the URI and performs the unsubscribe process on behalf of the end user. C. It checks the URI reputation and category and allows the content filter to take an action on it. D. It strips the malicious content of the URI before unsubscribing.

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 5

An email administrator observes that legitimate newsletters are being quarantined as spam.
Users still want to receive these messages but would prefer them categorized separately. Which ESA feature is most appropriate?

A. LDAP Routing B. Graymail Detection and Policies C. Sender Verification D. SMTP Authentication

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 6

What is the default method of remotely accessing a newly deployed Cisco Secure Email Virtual Gateway when a DHCP server is not available?

A. Use the IP address of 192.168.42.42 via the Management port B. DHCP is required for the initial IP address assignment C. Manual configuration of an IP address is required through the hypervisor console before remote access D. Manual configuration of an IP address is required through the serial port before remote access

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 7

When a network engineer is troubleshooting a mail flow issue, they discover that some emails are rejected with an SMTP code of 451 and the error message "#4.7.1 Unable to perform DMARC verification". In the DMARC verification profile on the Cisco Secure Email Gateway appliance, which action must be set for messages that result in temporary failure to prevent these emails from being rejected?

A. Accept B. No Action C. Ignore D. Quarantine

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 8

Which two components must be configured to perform DLP scanning? (Choose two.)

A. Enable a DLP policy on the Outgoing Mail Policy. B. Add a DLP policy to the Outgoing Content Filter. C. Add a DLP policy to the DLP Policy Manager. D. Add a DLP policy on the Incoming Mail Policy. E. Enable a DLP policy on the DLP Policy Customizations.

Discussion 0

Correct Answer: A,C Vote an answer

Question 9

An administrator needs to configure a Cisco ESA to block specific domains based on their reputation. Which service within the Cisco ESA should be utilized to accomplish this task?

A. Data Loss Prevention B. Sender Group C. Receiving SMTP Policy D. Anti-Virus

Discussion 0

Correct Answer: B Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 10

What is a capability of content filters?

A. to scan incoming or outgoing messages B. to review messages based on email subject C. to perform antispam scanning D. to apply rules before message filters

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 11

Refer to the exhibit. Which configuration allows the Cisco ESA to scan for executables inside the zip and apply the action as per the content filter?

A. Configure the recursion depth to a higher value. B. Modify the content filter to look for attachment filetype of compressed. C. Configure the maximum attachment size to a higher value. D. Modify the content filter to look for .exe filename instead of executable filetype.

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 12

Which ESA function maintains a set of rules that control incoming connections from remote hosts for a listener?

A. RAT B. HAT C. LDAP D. Sender group E. VEST

Discussion 0

Correct Answer: B Vote an answer

Question 13

An engineer must modify the altsrchost table on a Cisco Secure Email Gateway. Messages destined for a domain named @cisco.com must be mapped to NewInterface with an IP address of 10.10.10.1.
What must be added to the table?

A. NewInterface @cisco.com B. cisco.com@ NewInterface C. cisco.com@ 10.10.10.1 D. @cisco.com NewInterface

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).

Question 14

Refer to the exhibit. A security engineer must configure a Cisco Secure Email Gateway to ensure that encryption is enabled and the configured profile is provisioned. Which command must be used?

A. setup B. check encryption C. provision D. profiles

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for FreeCram members. You can sign-up / login (it's free).