Real Exam Questions 300-720 Dumps Exam Questions in here [Sep-2021]
Get Latest Sep-2021 Conduct effective penetration tests using 300-720
NEW QUESTION 27
Which two Cisco ESA features are used to control email delivery based on the sender? (Choose two.)
- A. spam quarantine
- B. blocklists
- C. safelists
- D. incoming mail policies
- E. outbreak filter
Answer: B,C
NEW QUESTION 28
Which setting affects the aggressiveness of spam detection?
- A. spam threshold
- B. spam timeout
- C. maximum depth of recursion scan
- D. protection level
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118220-technote- esa-00.html
NEW QUESTION 29
An engineer is tasked with reviewing mail logs to confirm that messages sent from domain abc.com are passing SPF verification and being accepted by the Cisco ESA. The engineer notices that SPF verification is not being performed and that SPF is not being referenced in the logs for messages sent from domain abc.com.
Why is the verification not working properly?
- A. The SPF conformance level is set to SIDF compatible on the Mail Flow Policy.
- B. SPF verification is disabled on the Mail Flow Policy.
- C. An SPF verification Content Filter has not been created.
- D. SPF verification is disabled in the Recipient Access Table.
Answer: C
NEW QUESTION 30
Which setting affects the aggressiveness of spam detection?
- A. spam threshold
- B. spam timeout
- C. maximum depth of recursion scan
- D. protection level
Answer: A
NEW QUESTION 31
When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?
- A. Enabling the End-User Safelist/Blocklist feature
- B. Spam Quarantine Alias Consolidation Query
- C. Spam Quarantine External Authentication Query
- D. Spam Quarantine End-User Authentication Query
Answer: D
NEW QUESTION 32
When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)
- A. abandon
- B. return
- C. delay
- D. redirect
- E. drop
Answer: C,D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01110.html
NEW QUESTION 33
Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)
- A. failover
- B. SLA monitor
- C. load balancing
- D. active-standby
- E. active-active
Answer: A,C
Explanation:
Explanation
You can enter multiple host names to configure the LDAP servers for failover or load-balancing. Separate multiple entries with commas.
NEW QUESTION 34
Which type of attack is prevented by configuring file reputation filtering and file analysis features?
- A. backscatter
- B. zero-day
- C. phishing
- D. denial of service
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010000.html#con_1809885
NEW QUESTION 35
What are two primary components of content filters? (Choose two.)
- A. subject
- B. conditions
- C. policies
- D. content
- E. actions
Answer: B,E
NEW QUESTION 36
What is the default HTTPS port when configuring spam quarantine on Cisco ESA?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION 37 
Refer to the exhibit. How should this configuration be modified to stop delivering Zero Day malware attacks?
- A. Change Unscannable Action from Deliver As Is to Quarantine.
- B. Apply Prepend on Modify Message Subject under Malware Attachments.
- C. Change File Analysis Pending action from Deliver As Is to Quarantine.
- D. Configure mailbox auto-remediation.
Answer: D
NEW QUESTION 38
What is the default behavior of any listener for TLS communication?
- A. preferred-verify
- B. preferred
- C. off
- D. required
Answer: C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118954-config- esa-00.html
NEW QUESTION 39
An organization wants to use DMARC to improve its brand reputation by leveraging DNS records.
Which two email authentication mechanisms are utilized during this process? (Choose two.)
- A. PKI
- B. DKIM
- C. DSTP
- D. TLS
Answer: C,D
NEW QUESTION 40
Which global setting is configured under Cisco ESA Scan Behavior?
- A. actions for unscannable messages due to attachment type
- B. attachment scanning timeout
- C. minimum attachment size to scan
- D. minimum depth of attachment recursion to scan
Answer: B
NEW QUESTION 41
When email authentication is configured on Cisco ESA, which two key types should be selected on the signing profile? (Choose two.)
- A. DKIM
- B. Private Keys
- C. Symmetric Keys
- D. Public Keys
- E. Domain Keys
Answer: A,E
NEW QUESTION 42
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?
- A. Map the envelope sender address to the host.
- B. Issue the altsrchost command.
- C. Set up the interface group with the flag.
- D. Apply a filter on the message.
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html#con_1133810
NEW QUESTION 43
......
Authentic Best resources for 300-720 Online Practice Exam: https://www.verifieddumps.com/300-720-valid-exam-braindumps.html
Get the superior quality 300-720 Dumps with explanations waiting just for you, get it now: https://drive.google.com/open?id=1LHPzHrx0HD1JrI0OhlSmXrC17j7zG2nO
