Download Update CCNP Security 300-720 SESA Dumps to Assess Yourself

test2022-06-27T06:25:10+00:00

Searching for update 300-720 dumps? The Securing Email with Cisco Email Security Appliance v1.0 (SESA 300-720) exam is a 90-minute exam associated with the CCNP Security, and Cisco Certified Specialist – Email Content Security certifications. FreeTestShare CCNP Security 300-720 SESA Dumps contain real exam questions and answers to help you pass CCNP 300-720 exam on the first try. CCNP Security 300-720 SESA Dumps are considerably more effective in familiarizing yourself with the format and type of 300-720 exam paper and can help you pass your exam successfully.

This free 300-720 practice test can now be used to assess your preparation.

Page 1 of 3

1. Which SMTP extension does Cisco ESA support for email security?

ETRN

UTF8SMTP

PIPELINING

STARTTLS

2. Which type of attack is prevented by configuring file reputation filtering and file analysis features?

denial of service

zero-day

backscatter

phishing

3. What is the default behavior of any listener for TLS communication?

preferred-verify

off

preferred

required

4. What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?

provisioned email encryption profile

message encryption from a content filter that select "Message Encryption" over TLS

message encryption from the mail flow policies with "CRES" selected

content filter to forward the email to the Cisco Registered Envelope server

5. Which two action types are performed by Cisco ESA message filters? (Choose two.)

non-final actions

filter actions

discard actions

final actions

quarantine actions

6. A network administrator is modifying an outgoing mail policy to enable domain protection for the organization. A DNS entry is created that has the public key.

Which two headers will be used as matching criteria in the outgoing mail policy? (Choose two.)

message-ID

sender

URL reputation

from

mail-from

7. An engineer is tasked with reviewing mail logs to confirm that messages sent from domain abc.com are passing SPF verification and being accepted by the Cisco ESA. The engineer notices that SPF verification is not being performed and that SPF is not being referenced in the logs for messages sent from domain abc.com.

Why is the verification not working properly?

SPF verification is disabled in the Recipient Access Table.

SPF verification is disabled on the Mail Flow Policy.

The SPF conformance level is set to SIDF compatible on the Mail Flow Policy.

An SPF verification Content Filter has not been created.

8. When URL logging is configured on a Cisco ESA, which feature must be enabled first?

antivirus

antispam

virus outbreak filter

senderbase reputation filter

9. Which two certificate authority lists are available in Cisco ESA? (Choose two.)

default

system

user

custom

demo

10. What is the order of virus scanning when multilayer antivirus scanning is configured?

The default engine scans for viruses first and the McAfee engine scans for viruses second.

The Sophos engine scans for viruses first and the McAfee engine scans for viruses second.

The McAfee engine scans for viruses first and the default engine scans for viruses second.

The McAfee engine scans for viruses first and the Sophos engine scans for viruses second.

Page 2 of 3

11. Which two steps configure Forged Email Detection? (Choose two.)

Configure a content dictionary with executive email addresses.

Configure a filter to use the Forged Email Detection rule and dictionary.

Configure a filter to check the Header From value against the Forged Email Detection dictionary.

Enable Forged Email Detection on the Security Services page.

Configure a content dictionary with friendly names.

12. What is the maximum message size that can be configured for encryption on the Cisco ESA?

20 MB

25 MB

15 MB

30 MB

13. What occurs when configuring separate incoming mail policies?

message splintering

message exceptions

message detachment

message aggregation

14. What is a valid content filter action?

decrypt on delivery

quarantine

skip antispam

archive

15. An administrator identifies that, over the past week, the Cisco ESA is receiving many emails from certain senders and domains which are being consistently quarantined. The administrator wants to ensure that these senders and domain are unable to send anymore emails.

Which feature on Cisco ESA should be used to achieve this?

incoming mail policies

safelist

blocklist

S/MIME Sending Profile

16. What is the default port to deliver emails from the Cisco ESA to the Cisco SMA using the centralized Spam Quarantine?

8025

6443

6025

8443

17. Which scenario prevents a message from being sent to the quarantine as an action in the scan behavior on Cisco ESA?

A policy quarantine is missing.

More than one email pipeline is defined.

The "modify the message subject" is already set.

The "add custom header" action is performed first.

18. When virtual gateways are configured, which two distinct attributes are allocated to each virtual gateway address? (Choose two.)

domain

IP address

DNS server address

DHCP server address

external spam quarantine

19. Refer to the exhibit.

What is the correct order of commands to set filter 2 to active?

filters-> edit-> 2-> Active

filters-> modify-> All-> Active

filters-> detail-> 2-> 1

filters-> set-> 2-> 1

20. Which method enables an engineer to deliver a flagged message to a specific virtual

gateway address in the most flexible way?

Set up the interface group with the flag.

Issue the altsrchost command.

Map the envelope sender address to the host.

Apply a filter on the message.

Page 3 of 3

21. What is a benefit of implementing URL filtering on the Cisco ESA?

removes threats from malicious URLs

blacklists spam

provides URL reputation protection

enhances reputation against malicious URLs

22. How does the graymail safe unsubscribe feature function?

It strips the malicious content of the URI before unsubscribing.

It checks the URI reputation and category and allows the content filter to take an action on it.

It redirects the end user who clicks the unsubscribe button to a sandbox environment to allow a safe unsubscribe.

It checks the reputation of the URI and performs the unsubscribe process on behalf of the end user.

23. An organization wants to use its existing Cisco ESA to host a new domain and enforce a separate corporate policy for that domain.

What should be done on the Cisco ESA to achieve this?

Use the smtproutes command to configure a SMTP route for the new domain.

Use the deli very config command to configure mail delivery for the new domain.

Use the dsestconf command to add a separate destination for the new domain.

Use the altrchost command to add a separate gateway for the new domain.

24. What are two prerequisites for implementing undesirable URL protection in Cisco ESA? (Choose two.)

Enable outbreak filters.

Enable email relay.

Enable antispam scanning.

Enable port bouncing.

Enable antivirus scanning.