Top Tips Of Update 300-720 Study Guide

NEW QUESTION 1
Which action is a valid fallback when a client certificate is unavailable during SMTP authentication on Cisco ESA?

• A. LDAP Query
• B. SMTP AUTH
• C. SMTP TLS
• D. LDAP BIND

Answer: B

NEW QUESTION 2
DRAG DROP
Drag and drop the steps to configure Cisco ESA to use SPF/SIDF verification from the left into the correct order on the right.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 3
Which type of attack is prevented by configuring file reputation filtering and file analysis features?

• A. denial of service
• B. zero-day
• C. backscatter
• D. phishing

Answer: B

NEW QUESTION 4
Which scenario prevents a message from being sent to the quarantine as an action in the scan behavior on Cisco ESA?

• A. A policy quarantine is missing.
• B. More than one email pipeline is defined.

Answer: A

NEW QUESTION 5
When URL logging is configured on a Cisco ESA, which feature must be enabled first?

• A. antivirus
• B. antispam
• C. virus outbreak filter
• D. senderbase reputation filter

Answer: C

NEW QUESTION 6
Which suboption must be selected when LDAP is configured for Spam Quarantine End-User Authentication?

• A. Designate as the active query
• B. Update Frequency
• C. Server Priority
• D. Entity ID

Answer: A

NEW QUESTION 7

Refer to the exhibit. Which SPF record is valid for mycompany.com?

• A. v=spf1 a mx ip4:199.209.31.2 -all
• B. v=spf1 a mx ip4:10.1.10.23 -all
• C. v=spf1 a mx ip4:199.209.31.21 -all
• D. v=spf1 a mx ip4:172.16.18.230 -all

Answer: B

Explanation:
54 What is a valid content filter action?
A. decrypt on delivery
B. quarantine
C. skip antispam
D. archive

NEW QUESTION 8
When email authentication is configured on Cisco ESA, which two key types should be selected on the signing profile? (Choose two.)

• A. DKIM
• B. Public Keys
• C. Domain Keys
• D. Symmetric Keys
• E. Private Keys

Answer: AC

NEW QUESTION 9
Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)

• A. The filters command executed from the CLI is used to configure the message filters.
• B. Message filters configuration within the web user interface is located within Incoming Content Filters.
• C. The filterconfig command executed from the CLI is used to configure message filters.
• D. Message filters can be configured only from the CLI.
• E. Message filters can be configured only from the web user interface.

Answer: AD

NEW QUESTION 10
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?

• A. Set up the interface group with the flag.
• B. Issue the altsrchost command.
• C. Map the envelope sender address to the host.
• D. Apply a filter on the message.

Answer: B

NEW QUESTION 11
Which two features are applied to either incoming or outgoing mail policies? (Choose two.)

• A. Indication of Compromise
• B. application filtering
• C. outbreak filters
• D. sender reputation filtering
• E. antivirus

Answer: CE

NEW QUESTION 12
Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)

• A. load balancing
• B. SLA monitor
• C. active-standby
• D. failover
• E. active-active

Answer: AD

NEW QUESTION 13
What is the default HTTPS port when configuring spam quarantine on Cisco ESA?

• A. 83
• B. 82
• C. 443
• D. 80

Answer: A

NEW QUESTION 14
When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?

• A. AAAA record
• B. PTR record
• C. TXT record
• D. MX record

Answer: B

Explanation:
37 Which attack is mitigated by using Bounce Verification?
A. spoof
B. denial of service
C. eavesdropping
D. smurf

NEW QUESTION 15
Which benefit does enabling external spam quarantine on Cisco SMA provide?

• A. ability to back up spam quarantine from multiple Cisco ESAs to one central console
• B. access to the spam quarantine interface on which a user can release, duplicate, or delete
• C. ability to scan messages by using two engines to increase a catch rate
• D. ability to consolidate spam quarantine data from multiple Cisco ESA to one central console

Answer: D

NEW QUESTION 16
How does the graymail safe unsubscribe feature function?

• A. It strips the malicious content of the URI before unsubscribing.
• B. It checks the URI reputation and category and allows the content filter to take an action on it.
• C. It redirects the end user who clicks the unsubscribe button to a sandbox environment to allow a safe unsubscribe.
• D. It checks the reputation of the URI and performs the unsubscribe process on behalf of the end user.

Answer: D

NEW QUESTION 17
DRAG DROP
An Encryption Profile has been set up on the Cisco ESA.
Drag and drop the steps from the left for creating an outgoing content filter to encrypt emails that contains the subject "Secure:" into the correct order on the right.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 18
What occurs when configuring separate incoming mail policies?

• A. message splintering
• B. message exceptions
• C. message detachment
• D. message aggregation

Answer: A

NEW QUESTION 19
What is the default behavior of any listener for TLS communication?

• A. preferred-verify
• B. off
• C. preferred
• D. required

Answer: B

NEW QUESTION 20
An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level."
What is the cause of this error?

• A. Content filters are configured at the machine-level on esa1.
• B. DLP is configured at the cluster-level on esa2.
• C. DLP is configured at the domain-level on esa1.
• D. DLP is not configured on host1.

Answer: D

NEW QUESTION 21
Which action must be taken before a custom quarantine that is being used can be deleted?

• A. Delete the quarantine that is assigned to a filter.
• B. Delete the quarantine that is not assigned to a filter.
• C. Delete only the unused quarantine.
• D. Remove the quarantine from the message action of a filter.

Answer: D

NEW QUESTION 22
Which two components must be configured to perform DLP scanning? (Choose two.)

• A. Add a DLP policy on the Incoming Mail Policy.
• B. Add a DLP policy to the DLP Policy Manager.
• C. Enable a DLP policy on the Outgoing Mail Policy.
• D. Enable a DLP policy on the DLP Policy Customizations.
• E. Add a DLP policy to the Outgoing Content Filter.

Answer: BC

NEW QUESTION 23
Which process is skipped when an email is received from safedomain.com, which is on the safelist?

• A. message filter
• B. antivirus scanning
• C. outbreak filter
• D. antispam scanning

Answer: A

NEW QUESTION 24
......