[Mar-2022] Cisco 300-720 Dumps – Reduce Your Chance of Failure in 300-720 Exam
To help you achieve your ultimate goal, we suggest the actual Cisco 300-720 dumps for your Securing Email with Cisco Email Security Appliance exam preparation to use as your guideline.
NEW QUESTION 19
A network administrator is modifying an outgoing mail policy to enable domain protection for the organization. A DNS entry is created that has the public key.
Which two headers will be used as matching criteria in the outgoing mail policy? (Choose two.)
- A. URL reputation
- B. mail-from
- C. from
- D. message-ID
- E. sender
Answer: C,E
NEW QUESTION 20
Which global setting is configured under Cisco ESA Scan Behavior?
- A. actions for unscannable messages due to attachment type
- B. minimum attachment size to scan
- C. attachment scanning timeout
- D. minimum depth of attachment recursion to scan
Answer: C
NEW QUESTION 21
An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level." What is the cause of this error?
- A. DLP is configured at the domain-level on esa1.
- B. Content filters are configured at the machine-level on esa1.
- C. DLP is configured at the cluster-level on esa2.
- D. DLP is not configured on host1.
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118026-technote- esa-00.html
NEW QUESTION 22
When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)
- A. delay
- B. abandon
- C. drop
- D. return
- E. redirect
Answer: A,E
NEW QUESTION 23
Which two steps configure Forged Email Detection? (Choose two.)
- A. Configure a filter to check the Header From value against the Forged Email Detection dictionary.
- B. Configure a filter to use the Forged Email Detection rule and dictionary.
- C. Configure a content dictionary with executive email addresses.
- D. Configure a content dictionary with friendly names.
- E. Enable Forged Email Detection on the Security Services page.
Answer: B,C
Explanation:
Reference:
https://explore.cisco.com/esa-feature-enablement/user-guide-for-async-11
NEW QUESTION 24
DRAG DROP
Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.
Select and Place:
Answer:
Explanation:
Explanation/Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/ b_ESA_Admin_Guide_11_1_chapter_010101.html
NEW QUESTION 25
Which two features are applied to either incoming or outgoing mail policies? (Choose two.)
- A. outbreak filters
- B. sender reputation filtering
- C. Indication of Compromise
- D. application filtering
- E. antivirus
Answer: A,E
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html
NEW QUESTION 26
Which benefit does enabling external spam quarantine on Cisco SMA provide?
- A. ability to back up spam quarantine from multiple Cisco ESAs to one central console
- B. access to the spam quarantine interface on which a user can release, duplicate, or delete
- C. ability to consolidate spam quarantine data from multiple Cisco ESA to one central console
- D. ability to scan messages by using two engines to increase a catch rate
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-0/user_guide/ b_SMA_Admin_Guide/b_SMA_Admin_Guide_chapter_010101.html
NEW QUESTION 27
What is the default port to deliver emails from the Cisco ESA to the Cisco SMA using the centralized Spam Quarantine?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure- esa-00.html
NEW QUESTION 28
An administrator must ensure that emails sent from [email protected] are routed through an alternate virtual gateway. Drag and drop the snippet from the bottom onto the blank in the graphic to finish the message filter syntax. Not all snippets are used.
Answer:
Explanation:
Explanation
Table Description automatically generated
NEW QUESTION 29
When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?
- A. Enabling the End-User Safelist/Blocklist feature
- B. Spam Quarantine End-User Authentication Query
- C. Spam Quarantine External Authentication Query
- D. Spam Quarantine Alias Consolidation Query
Answer: B
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692- configure-esa-00.html
NEW QUESTION 30
Email encryption is configured on a Cisco ESA that uses CRES.
Which action is taken on a message when CRES is unavailable?
- A. It is dropped and an error message is sent to the sender.
- B. It is encrypted by a Cisco encryption appliance.
- C. It is requeued.
- D. It is sent in clear text.
Answer: D
NEW QUESTION 31
What occurs when configuring separate incoming mail policies?
- A. message aggregation
- B. message exceptions
- C. message splintering
- D. message detachment
Answer: C
NEW QUESTION 32
Drag and drop the steps to configure Cisco ESA to use SPF/SIDF verification from the left into the correct order on the right.
Answer:
Explanation:
NEW QUESTION 33
Which SMTP extension does Cisco ESA support for email security?
- A. STARTTLS
- B. ETRN
- C. UTF8SMTP
- D. PIPELINING
Answer: A
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011000.html
NEW QUESTION 34
Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.
Answer:
Explanation:
NEW QUESTION 35
Which action on the Cisco ESA provides direct access to view the safelist/blocklist?
- A. Show the SLBL cache on the CLI.
- B. Debug the mail flow policy.
- C. Monitor Incoming/Outgoing Listener.
- D. Export the SLBL to a .csv file.
Answer: D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117922-technote- esa-00.html
NEW QUESTION 36
Which SMTP extension does Cisco ESA support for email security?
- A. STARTTLS
- B. ETRN
- C. UTF8SMTP
- D. PIPELINING
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011000.html
NEW QUESTION 37
When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?
- A. MX record
- B. PTR record
- C. TXT record
- D. AAAA record
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213939-esa- configure-dkim-signing.html
NEW QUESTION 38
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?
- A. Set up the interface group with the flag.
- B. Issue the altsrchost command.
- C. Apply a filter on the message.
- D. Map the envelope sender address to the host.
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html#con_1133810
NEW QUESTION 39
......
100% Free 300-720 Demo-Trial [Pdf], get it now: https://drive.google.com/open?id=1AkVFX5BqtIAIPSv6M70T0SZ1RSQPINYf
Accurate & Verified Answers As Seen in the Real Exam here: https://www.validdumps.top/300-720-exam-torrent.html