2021 Realistic Exam-Killer 300-720 Dumps PDF - 100% Passing Guarantee
Free Cisco 300-720 Exam Questions & Answer
However, the must-have skills for a learner intending to attend the course include services for TCP/IP, including DNS, SNMP, DNS, FTP, SSH, HTTP, as well as HTTPS. Then, being experienced in IP routing is another requirement for the final test. Once you have completed the course for 300-720 exam, you ought to have achieved the following objectives:
- Applying mailing policies;
- Controlling domains for the sender as well as the recipient;
- Enforcing Email policies using messaging filters;
- Using content filters;
- Describing and using the Cisco ESA;
- Authenticating Emails;
- Monitoring spam using anti-spam and Talos SenderBase;
- Applying system quarantines as well as delivery methods;
- Email encryption;
- Using clusters for centralized management;
- Performing LDAP queries;
- Using anti-virus as well as outbreak filters;
- Preventing loss of data;
- Authenticating SMTP sessions;
- Testing and troubleshooting.
NEW QUESTION 37
What is a benefit of implementing URL filtering on the Cisco ESA?
- A. provides URL reputation protection
- B. blacklists spam
- C. removes threats from malicious URLs
- D. enhances reputation against malicious URLs
Answer: A
NEW QUESTION 38
Which feature must be configured before an administrator can use the outbreak filter for nonviral threats?
- A. antivirus
- B. quarantine threat level
- C. data loss prevention
- D. antispam
Answer: D
NEW QUESTION 39
What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?
- A. provisioned email encryption profile
- B. content filter to forward the email to the Cisco Registered Envelope server
- C. message encryption from the mail flow policies with "CRES" selected
- D. message encryption from a content filter that select "Message Encryption" over TLS
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010010.html
NEW QUESTION 40
Which setting affects the aggressiveness of spam detection?
- A. maximum depth of recursion scan
- B. spam threshold
- C. spam timeout
- D. protection level
Answer: B
NEW QUESTION 41
Which two action types are performed by Cisco ESA message filters? (Choose two.)
- A. discard actions
- B. final actions
- C. filter actions
- D. non-final actions
- E. quarantine actions
Answer: B,D
NEW QUESTION 42
An administrator identifies that, over the past week, the Cisco ESA is receiving many emails from certain senders and domains which are being consistently quarantined. The administrator wants to ensure that these senders and domain are unable to send anymore emails.
Which feature on Cisco ESA should be used to achieve this?
- A. incoming mail policies
- B. safelist
- C. S/MIME Sending Profile
- D. blocklist
Answer: A
NEW QUESTION 43
Drag and drop the Cisco ESA reactions to a possible DLP from the left onto the correct action types on the right.
Answer:
Explanation:
NEW QUESTION 44
Which two Cisco ESA features are used to control email delivery based on the sender? (Choose two.)
- A. blocklists
- B. spam quarantine
- C. safelists
- D. incoming mail policies
- E. outbreak filter
Answer: A,C
NEW QUESTION 45
An analyst creates a new content dictionary to use with Forged Email Detection.
Which entry will be added into the dictionary?
- A. Alpha Beta
- B. mycompany.com
- C. ^Alpha\ Beta$
- D. [email protected]
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/products/collateral/security/email-security-appliance/ whitepaper_C11-737596.html
NEW QUESTION 46
A network administrator is modifying an outgoing mail policy to enable domain protection for the organization. A DNS entry is created that has the public key.
Which two headers will be used as matching criteria in the outgoing mail policy? (Choose two.)
- A. URL reputation
- B. from
- C. mail-from
- D. message-ID
- E. sender
Answer: B,E
NEW QUESTION 47
Which two features are applied to either incoming or outgoing mail policies? (Choose two.)
- A. application filtering
- B. antivirus
- C. sender reputation filtering
- D. outbreak filters
- E. Indication of Compromise
Answer: B,D
NEW QUESTION 48
Which action is a valid fallback when a client certificate is unavailable during SMTP authentication on Cisco ESA?
- A. SMTP AUTH
- B. SMTP TLS
- C. LDAP Query
- D. LDAP BIND
Answer: A
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011011.html
NEW QUESTION 49
An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level." What is the cause of this error?
- A. Content filters are configured at the machine-level on esa1.
- B. DLP is not configured on host1.
- C. DLP is configured at the domain-level on esa1.
- D. DLP is configured at the cluster-level on esa2.
Answer: B
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118026-technote- esa-00.html
NEW QUESTION 50
DRAG DROP
Drag and drop the Cisco ESA reactions to a possible DLP from the left onto the correct action types on the right.
Select and Place:
Answer:
Explanation:
Explanation/Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/ b_ESA_Admin_Guide_chapter_010001.html (message actions)
NEW QUESTION 51
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?
- A. Map the envelope sender address to the host.
- B. Set up the interface group with the flag.
- C. Issue the altsrchost command.
- D. Apply a filter on the message.
Answer: C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html#con_1133810
NEW QUESTION 52
Which attack is mitigated by using Bounce Verification?
- A. smurf
- B. spoof
- C. eavesdropping
- D. denial of service
Answer: D
Explanation:
Explanation/Reference: https://www.networkworld.com/article/2305394/ironport-adds-bounce-back-verification-for-e- mail.html
NEW QUESTION 53
What are two prerequisites for implementing undesirable URL protection in Cisco ESA? (Choose two.)
- A. Enable port bouncing.
- B. Enable email relay.
- C. Enable antispam scanning.
- D. Enable outbreak filters.
- E. Enable antivirus scanning.
Answer: C,D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01111.html
NEW QUESTION 54
What is the maximum message size that can be configured for encryption on the Cisco ESA?
- A. 25 MB
- B. 15 MB
- C. 30 MB
- D. 20 MB
Answer: D
NEW QUESTION 55
When virtual gateways are configured, which two distinct attributes are allocated to each virtual gateway address? (Choose two.)
- A. DNS server address
- B. domain
- C. DHCP server address
- D. IP address
- E. external spam quarantine
Answer: B,D
NEW QUESTION 56
......
Verified 300-720 dumps Q&As Latest 300-720 Download: https://www.exam-killer.com/300-720-valid-questions.html
Updated 100% Cover Real 300-720 Exam Questions - 100% Pass Guarantee: https://drive.google.com/open?id=1NTV9lxu_74XzojwWSHbasIU0-tGY4M27
