Prepare For Realistic 300-720 Dumps PDF - 100% Passing Guarantee
Check the Available 300-720 Exam Dumps with 149 Q's
Cisco 300-720 certification exam is designed for professionals who want to secure email using the Cisco Email Security Appliance (ESA). Securing Email with Cisco Email Security Appliance certification is ideal for security professionals who are interested in enhancing their skills in email security and for those who are responsible for managing the email security infrastructure of an organization.
Cisco 300-720 certification exam is part of the Cisco Certified Specialist - Email Content Security certification. Securing Email with Cisco Email Security Appliance certification is an excellent way to showcase your expertise in email security technologies and solutions. The Cisco Email Security Appliance is a widely used email security solution that is used by many organizations worldwide. By passing this certification exam, you will be able to demonstrate your proficiency in email security technologies and solutions and enhance your career prospects in the cybersecurity field.
NEW QUESTION # 21
Refer to the exhibit.
What results from this filter configuration?
- A. Action is skipping all antivirus checks for the mail
- B. Action is skipping all antispam checks for the mail.
- C. Action is applied to all mail that has the subject "FW: Bounce Notification."
- D. Action is applied to all mail from [email protected].
Answer: A
NEW QUESTION # 22
An organization wants to designate help desk personnel to assist with tickets that request the release of messages from the spam quarantine because company policy does not permit direct end-user access to the quarantine. Which two roles must be used to allow help desk personnel to release messages while restricting their access to make configuration changes in the Cisco Secure Email Gateway? (Choose two.)
- A. Read-Only Operator
- B. Administrator
- C. Help Desk User
- D. Quarantine Administrator
- E. Technician
Answer: C,D
Explanation:
All users with administrator privileges can change spam quarantine settings and view and manage messages in the spam quarantine. You do not need to configure spam quarantine access for administrator users.
If you configure access to the spam quarantine for users with the following roles, they can view, release, and delete messages in the spam quarantine:
-Operator
-Read-only operator
-Help desk user
-Guest
-Custom user roles that have spam quarantine privileges
These users cannot access spam quarantine settings.
https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0/b_ESA_Admin_Guide_12_1_chapter_0100000.html?bookSearch=true#con_1624156
NEW QUESTION # 23
Which benefit does enabling external spam quarantine on Cisco SMA provide?
- A. access to the spam quarantine interface on which a user can release, duplicate, or delete
- B. ability to back up spam quarantine from multiple Cisco ESAs to one central console
- C. ability to consolidate spam quarantine data from multiple Cisco ESA to one central console
- D. ability to scan messages by using two engines to increase a catch rate
Answer: C
NEW QUESTION # 24
Which suboption must be selected when LDAP is configured for Spam Quarantine End-User Authentication?
- A. Server Priority
- B. Update Frequency
- C. Entity ID
- D. Designate as the active query
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-5/user_guide/ b_SMA_Admin_Guide_11_5/b_SMA_Admin_Guide_11_5_chapter_01010.html
NEW QUESTION # 25
Which global setting is configured under Cisco ESA Scan Behavior?
- A. actions for unscannable messages due to attachment type
- B. minimum depth of attachment recursion to scan
- C. minimum attachment size to scan
- D. attachment scanning timeout
Answer: D
Explanation:
Reference:
https://community.cisco.com/t5/email-security/cisco-ironport-esa-security-services-scan-behavior- impact-on-av/td-p/3923243
NEW QUESTION # 26
When URL logging is configured on a Cisco ESA, which feature must be enabled first?
- A. antivirus
- B. antispam
- C. senderbase reputation filter
- D. virus outbreak filter
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote- esa-00.html (note under enable url filtering)
NEW QUESTION # 27
What is the default behavior of any listener for TLS communication?
- A. off
- B. required
- C. preferred
- D. preferred-verify
Answer: A
NEW QUESTION # 28
Refer to the exhibit. What is the correct order of commands to set filter 2 to active?
- A. filters-> detail-> 2-> 1
- B. filters-> edit-> 2-> Active
- C. filters-> set-> 2-> 1
- D. filters-> modify-> All-> Active
Answer: C
Explanation:
The correct order of commands to set filter 2 to active on the CLI of Cisco ESA is:
filters, which enters the message filter mode.
set, which sets the status of one or more message filters.
2, which specifies the message filter number.
1, which sets the status of message filter 2 to active.
The other options are not valid orders of commands to set filter 2 to active on the CLI of Cisco ESA, because they use incorrect commands or parameters.
NEW QUESTION # 29
A Cisco Secure Email Gateway administrator must provide outbound email authenticity and configures a DKIM signing profile to handle this task. What is the next step to allow this organization to use DKIM for their outbound email?
- A. Configure the Trusted Sender Group message authenticity policy.
- B. Enable the DKIM service checker
- C. Export the DNS TXT record to provide to the DNS registrar
- D. Import the DNS record of the service provider into the Cisco Secure Email Gateway.
Answer: C
Explanation:
To use DKIM for outbound email, the administrator must export the DNS TXT record from the Cisco Secure Email Gateway and provide it to the DNS registrar of the domain. This will allow the recipient servers to verify the DKIM signature of the email by querying the DNS record of the sender domain. Reference: [Cisco Secure Email Gateway Administrator Guide - Configuring DKIM Signing]
NEW QUESTION # 30
An administrator is managing multiple Cisco ESA devices and wants to view the quarantine emails from all devices in a central location.
How is this accomplished?
- A. Configure a mail policy to determine whether the message is sent to the local or external quarantine.
- B. Disable the local quarantine before sending SPAM to the external quarantine.
- C. Configure a user policy to determine whether the message is sent to the local or external quarantine.
- D. Disable the VOF feature before sending SPAM to the external quarantine.
Answer: B
Explanation:
Disabling the Local Spam Quarantine to Activate the External Quarantine If you were using a local spam quarantine before enabling an external spam quarantine, you must disable the local quarantine in order to send messages to the external quarantine. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_0101010.html?bookSearch=true#con_1172419
NEW QUESTION # 31
Refer to the exhibit. Which configuration on the scan behavior must be updated to allow the attachment to be scanned on the Cisco ESA?
- A. Increase the maximum recursion depth from 5 to a larger value.
- B. Increase the maximum attachment size to scan to a larger value.
- C. Enable assume match pattern if the email was not scanned for any reason.
- D. Add an additional mapping for attachment type for zip files.
Answer: D
NEW QUESTION # 32
What is the maximum message size that can be configured for encryption on the Cisco ESA?
- A. 30 MB
- B. 25 MB
- C. 20 MB
- D. 15 MB
Answer: B
Explanation:
The maximum message size that can be configured for encryption on the Cisco ESA is 25 MB. This is the default value for the Maximum Message Size for Encryption setting in the Encryption Profile. Messages that exceed this size will not be encrypted and will be delivered as normal.
NEW QUESTION # 33
What is the default HTTPS port when configuring spam quarantine on Cisco ESA?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 34
What is the maximum message size that can be configured for encryption on the Cisco ESA?
- A. 25 MB
- B. 30 MB
- C. 20 MB
- D. 15 MB
Answer: C
NEW QUESTION # 35
An administrator is managing multiple Cisco ESA devices and wants to view the quarantine emails from all devices in a central location.
How is this accomplished?
- A. Configure a mail policy to determine whether the message is sent to the local or external quarantine.
- B. Configure a user policy to determine whether the message is sent to the local or external quarantine.
- C. Disable the VOF feature before sending SPAM to the external quarantine.
- D. Disable the local quarantine before sending SPAM to the external quarantine.
Answer: A
NEW QUESTION # 36
When the Cisco ESA is configured to use Centralized Message Tracking, which default port is used between the device and the Cisco Security Management Appliance?
- A. port 23/TCP
- B. port 22/TCP
- C. port 80/UDP
- D. port 53/UDP
- E. port 25/UDP
Answer: B
NEW QUESTION # 37
What occurs when configuring separate incoming mail policies?
- A. message detachment
- B. message splintering
- C. message aggregation
- D. message exceptions
Answer: B
Explanation:
Message splintering is a process that occurs when configuring separate incoming mail policies on Cisco ESA. Message splintering means that Cisco ESA will split a single incoming message into multiple copies, each with a different recipient and policy, and apply different security services and actions to each copy.
NEW QUESTION # 38
Refer to the exhibit.
Which additional configuration action must be taken to protect against Directory Harvest Attacks?
- A. In the Listener Settings, modify the LDAP Queries configuration to use the Work Queue
- B. In the mail flow policy, configure Directory Harvest Attack Prevention.
- C. In the LDAP Server profile, configure Directory Harvest Attack Prevention
- D. When LDAP Queries are configured, Directory Harvest Attack Prevention is enabled by default.
Answer: B
Explanation:
To protect against Directory Harvest Attacks, the administrator must configure Directory Harvest Attack Prevention in the mail flow policy that applies to the listener. This will enable the Cisco Secure Email Gateway to reject or throttle messages that are sent to invalid recipients by checking the LDAP server for valid email addresses. Reference: [Cisco Secure Email Gateway Administrator Guide - Configuring Directory Harvest Attack Prevention]
NEW QUESTION # 39
......
Download 300-720 Exam Dumps Questions to get 100% Success: https://passguide.dumpexams.com/300-720-vce-torrent.html