Pass 300-720 SESA Exam By Using 300-720 Test Questions With 100% Passing Guarantee

Regina2021-08-26T08:31:02+00:00

By Regina CCNP Security, Cisco, Free Questions Online 300-720, 300-720 free questions, 300-720 test questions

To pass 300-720 Securing Email with Cisco Email Security Appliance (SESA) exam and get good marks, you should learn the ITExamShop 300-720 test questions. ITExamShop offers the most recent Microsoft AZ-120 practice questions of the Securing Email with Cisco Email Security Appliance (SESA) exam with their correct answers in the preparation material. Learn all these AZ-120 exam questions and answers, and you will be fully ready to take your 300-720 exam. More, ITExamShop will provide you the one year free updates for the 300-720 test questions.

If you want to make yourself satisfied about the quality 300-720 exam questions, then you can check 300-720 free questions before making your purchase.

Page 1 of 3

1. Which two are configured in the DMARC verification profile? (Choose two.)

name of the verification profile

minimum number of signatures to verify

ESA listeners to use the verification profile

message action into an incoming or outgoing content filter

message action to take when the policy is reject/quarantine

2. Refer to the exhibit.

Which SPF record is valid for mycompany.com?

v=spf1 a mx ip4:199.209.31.2 -all

v=spf1 a mx ip4:10.1.10.23 -all

v=spf1 a mx ip4:199.209.31.21 -all

v=spf1 a mx ip4:172.16.18.230 -all

3. What are two primary components of content filters? (Choose two.)

conditions

subject

content

actions

policies

4. How does the graymail safe unsubscribe feature function?

It strips the malicious content of the URI before unsubscribing.

It checks the URI reputation and category and allows the content filter to take an action on it.

It redirects the end user who clicks the unsubscribe button to a sandbox environment to allow a safe unsubscribe.

It checks the reputation of the URI and performs the unsubscribe process on behalf of the end user.

5. An email containing a URL passes through the Cisco ESA that has content filtering disabled for all mail policies. The sender is [email protected], the recipients are [email protected], [email protected], [email protected], and [email protected]. The subject of the email is Test Document395898847. An administrator wants to add a policy to ensure that the Cisco ESA evaluates the web reputation score before permitting this email.

Which two criteria must be used by the administrator to achieve this? (Choose two.)

Subject contains Test Document"

Sender matches test1.com

Email body contains a URL

Date and time of email

Email does not match [email protected]

6. Which scenario prevents a message from being sent to the quarantine as an action in the scan behavior on Cisco ESA?

A policy quarantine is missing.

More than one email pipeline is defined.

The "modify the message subject" is already set.

The "add custom header" action is performed first.

7. Which process is skipped when an email is received from safedomain.com, which is on the safelist?

message filter

antivirus scanning

outbreak filter

antispam scanning

8. When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?

AAAA record

PTR record

TXT record

MX record

9. When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

30 seconds

90 seconds

60 seconds

120 seconds

10. Which feature utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco ESA?

SenderBase Reputation Filtering

Connection Reputation Filtering

Talos Reputation Filtering

SpamCop Reputation Filtering

Page 2 of 3

11. Which action must be taken before a custom quarantine that is being used can be deleted?

Delete the quarantine that is assigned to a filter.

Delete the quarantine that is not assigned to a filter.

Delete only the unused quarantine.

Remove the quarantine from the message action of a filter.

12. Which two steps configure Forged Email Detection? (Choose two.)

Configure a content dictionary with executive email addresses.

Configure a filter to use the Forged Email Detection rule and dictionary.

Configure a filter to check the Header From value against the Forged Email Detection dictionary.

Enable Forged Email Detection on the Security Services page.

Configure a content dictionary with friendly names.

13. An engineer is testing mail flow on a new Cisco ESA and notices that messages for domain abc.com are stuck in the delivery queue. Upon further investigation, the engineer notices that the messages pending delivery are destined for 192.168.1.11, when they should instead be routed to 192.168.1.10.

What configuration change needed to address this issue?

Add an address list for domain abc.com.

Modify Destination Controls entry for the domain abc.com.

Modify the SMTP route for the domain and change the IP address to 192.168.1.10.

Modify the Routing Tables and add a route for IP address to 192.168.1.10.

14. Which two components must be configured to perform DLP scanning? (Choose two.)

Add a DLP policy on the Incoming Mail Policy.

Add a DLP policy to the DLP Policy Manager.

Enable a DLP policy on the Outgoing Mail Policy.

Enable a DLP policy on the DLP Policy Customizations.

Add a DLP policy to the Outgoing Content Filter.

15. Refer to the exhibits.

What must be done to enforce end user authentication before accessing quarantine?

Enable SPAM notification and use LDAP for authentication.

Enable SPAM Quarantine Notification and add the %quarantine_url% variable.

Change the end user quarantine access from None authentication to SAA

Change the end user quarantine access setting from None authentication to Mailbox.

16. Refer to the exhibit.

How should this configuration be modified to stop delivering Zero Day malware attacks?

Change Unscannable Action from Deliver As Is to Quarantine.

Change File Analysis Pending action from Deliver As Is to Quarantine.

Configure mailbox auto-remediation.

Apply Prepend on Modify Message Subject under Malware Attachments.

17. Which Cisco ESA security service is configured only through an outgoing mail policy?

antivirus

DLP

Outbreak Filters

AMP

18. Which action on the Cisco ESA provides direct access to view the safelist/blocklist?

Show the SLBL cache on the CL

Monitor Incoming/Outgoing Listener.

Export the SLBL to a .csv file.

Debug the mail flow policy.

19. An organization wants to use DMARC to improve its brand reputation by leveraging DNS records.

Which two email authentication mechanisms are utilized during this process? (Choose two.)

DSTP

DKIM

TLS

PKI

20. An administrator identifies that, over the past week, the Cisco ESA is receiving many emails from certain senders and domains which are being consistently quarantined. The administrator wants to ensure that these senders and domain are unable to send anymore emails.

Which feature on Cisco ESA should be used to achieve this?

incoming mail policies

safelist

blocklist

S/MIME Sending Profile

Page 3 of 3

21. Refer to the exhibit.

An engineer needs to change the existing Forged Email Detection message filter so that it references a newly created dictionary named ‘Executives’.

What should be done to accomplish this task?

Change "from" to "Executives".

Change "TESF to "Executives".

Change fed' to "Executives".

Change "support" to "Executives".

22. What occurs when configuring separate incoming mail policies?

message splintering

message exceptions

message detachment

message aggregation

23. Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)

load balancing

SLA monitor

active-standby

failover

active-active

24. What is the default port to deliver emails from the Cisco ESA to the Cisco SMA using the centralized Spam Quarantine?

8025

6443

6025

8443

Welcome To Choose Required IT Certification Exams Online

Pass 300-720 SESA Exam By Using 300-720 Test Questions With 100% Passing Guarantee

If you want to make yourself satisfied about the quality 300-720 exam questions, then you can check 300-720 free questions before making your purchase.

Author