300-720 Exam Questions - Real & Updated Questions PDF
Pass Guaranteed Quiz 2022 Realistic Verified Free Cisco
Conclusion
Being an Email security specialist, you need to ensure that you have the relevant skills to safeguard your organization’s email systems. The Cisco 300-720 is a test for these skills and it is there to evaluate how good you are with the associated skills. By taking and passing this exam, you will prove to your current and prospective employers that you are well versed with your job and the use of Cisco ESA. Training with an official course and learning with self-study materials like guides will bring more value to your preparation and success in the actual evaluation.
Cisco 300-720 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
| Topic 7 |
|
| Topic 8 |
|
| Topic 9 |
|
| Topic 10 |
|
| Topic 11 |
|
NEW QUESTION 11
An organization wants to use its existing Cisco ESA to host a new domain and enforce a separate corporate policy for that domain.
What should be done on the Cisco ESA to achieve this?
- A. Use the dsestconf command to add a separate destination for the new domain.
- B. Use the altrchost command to add a separate gateway for the new domain.
- C. Use the smtproutes command to configure a SMTP route for the new domain.
- D. Use the deli very config command to configure mail delivery for the new domain.
Answer: C
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-
0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011001.html
NEW QUESTION 12
Which two actions are configured on the Cisco ESA to query LDAP servers? (Choose two.)
- A. route
- B. delay
- C. relay
- D. reject
- E. accept
Answer: A,E
NEW QUESTION 13
An engineer is testing mail flow on a new Cisco ESA and notices that messages for domain abc.com are stuck in the delivery queue. Upon further investigation, the engineer notices that the messages pending delivery are destined for 192.168.1.11, when they should instead be routed to
192.168.1.10.
What configuration change needed to address this issue?
- A. Modify Destination Controls entry for the domain abc.com.
- B. Modify the SMTP route for the domain and change the IP address to 192.168.1.10.
- C. Add an address list for domain abc.com.
- D. Modify the Routing Tables and add a route for IP address to 192.168.1.10.
Answer: B
Explanation:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118136-qanda-esa-
00.html
NEW QUESTION 14
Which two query types are available when an LDAP profile is configured? (Choose two.)
- A. routing
- B. user
- C. group
- D. proxy consolidation
- E. recursive
Answer: A,C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011010.html
NEW QUESTION 15
Which setting affects the aggressiveness of spam detection?
- A. spam threshold
- B. protection level
- C. maximum depth of recursion scan
- D. spam timeout
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118220-technote- esa-00.html
NEW QUESTION 16
Drag and Drop Question
An Encryption Profile has been set up on the Cisco ESA.
Drag and drop the steps from the left for creating an outgoing content filter to encrypt emails that contains the subject "Secure:" into the correct order on the right.
Answer:
Explanation:
NEW QUESTION 17
What is the default HTTPS port when configuring spam quarantine on Cisco ESA?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/ b_ESA_Admin_Guide_ces_11_1/b_ESA_Admin_Guide_chapter_011111.pdf
NEW QUESTION 18
Which type of query must be configured when setting up the Spam Quarantine while merging notifications?
- A. Spam Quarantine Alias Authentication Query
- B. Spam Quarantine Alias Masquerading Query
- C. Spam Quarantine Alias Consolidation Query
- D. Spam Quarantine Alias Routing Query
Answer: C
NEW QUESTION 19
Refer to the exhibit. Which configuration on the scan behavior must be updated to allow the attachment to be scanned on the Cisco ESA?
- A. Add an additional mapping for attachment type for zip files.
- B. Increase the maximum recursion depth from 5 to a larger value.
- C. Increase the maximum attachment size to scan to a larger value.
- D. Enable assume match pattern if the email was not scanned for any reason.
Answer: A
NEW QUESTION 20
Which two factors must be considered when message filter processing is configured? (Choose two.)
- A. MIME structure of the message
- B. lateral processing
- C. mail policies
- D. message-filter order
- E. structure of the combined packet
Answer: A,D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01000.html
NEW QUESTION 21
Refer to the exhibit. An engineer needs to change the existing Forged Email Detection message filter so that it references a newly created dictionary named `Executives'.
What should be done to accomplish this task?
- A. Change "support" to "Executives".
- B. Change "TESF to "Executives".
- C. Change "from" to "Executives".
- D. Change fed' to "Executives".
Answer: A
NEW QUESTION 22
What is the purpose of Cisco Email Encryption on Cisco ESA?
- A. to authenticate direct communication between a sender and Cisco ESA
- B. to ensure integrity between a sender and MTA
- C. to ensure anonymity between a recipient and MTA
- D. to ensure privacy between Cisco ESA and MTA
Answer: D
NEW QUESTION 23
What are two primary components of content filters? (Choose two.)
- A. policies
- B. actions
- C. content
- D. subject
- E. conditions
Answer: B,E
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/ b_ESA_Admin_Guide_ces_11_1/b_ESA_Admin_Guide_chapter_01010.pdf
NEW QUESTION 24
Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)
- A. Message filters can be configured only from the web user interface.
- B. The filters command executed from the CLI is used to configure the message filters.
- C. Message filters can be configured only from the CLI.
- D. The filterconfig command executed from the CLI is used to configure message filters.
- E. Message filters configuration within the web user interface is located within Incoming Content Filters.
Answer: B,C
NEW QUESTION 25
Which two steps configure Forged Email Detection? (Choose two.)
- A. Configure a filter to use the Forged Email Detection rule and dictionary.
- B. Enable Forged Email Detection on the Security Services page.
- C. Configure a filter to check the Header From value against the Forged Email Detection dictionary.
- D. Configure a content dictionary with executive email addresses.
- E. Configure a content dictionary with friendly names.
Answer: A,D
Explanation:
Reference:
https://explore.cisco.com/esa-feature-enablement/user-guide-for-async-11
NEW QUESTION 26
What are two primary components of content filters? (Choose two.)
- A. policies
- B. actions
- C. content
- D. subject
- E. conditions
Answer: B,E
NEW QUESTION 27
Drag and Drop Question
An administrator must ensure that emails sent from [email protected] are routed through an alternate virtual gateway. Drag and drop the snippet from the bottom onto the blank in the graphic to finish the message filter syntax. Not all snippets are used.
Answer:
Explanation:
NEW QUESTION 28
Which two service problems can the Cisco Email Security Appliance solve? (Choose two.)
- A. URL filtering
- B. DLP
- C. Antispam
- D. IPS
Answer: B,C
NEW QUESTION 29
An administrator is managing multiple Cisco ESA devices and wants to view the quarantine emails from all devices in a central location.
How is this accomplished?
- A. Disable the VOF feature before sending SPAM to the external quarantine.
- B. Disable the local quarantine before sending SPAM to the external quarantine.
- C. Configure a mail policy to determine whether the message is sent to the local or external quarantine.
- D. Configure a user policy to determine whether the message is sent to the local or external quarantine.
Answer: C
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-
0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_0100000.html#t ask _1749146
NEW QUESTION 30
When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?
- A. Spam Quarantine Alias Consolidation Query
- B. Spam Quarantine External Authentication Query
- C. Enabling the End-User Safelist/Blocklist feature
- D. Spam Quarantine End-User Authentication Query
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure- esa-00.html
NEW QUESTION 31
An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level." What is the cause of this error?
- A. DLP is configured at the domain-level on esa1.
- B. DLP is configured at the cluster-level on esa2.
- C. DLP is not configured on host1.
- D. Content filters are configured at the machine-level on esa1.
Answer: C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118026-technote- esa-00.html
NEW QUESTION 32
An organization wants to use its existing Cisco ESA to host a new domain and enforce a separate corporate policy for that domain.
What should be done on the Cisco ESA to achieve this?
- A. Use the dsestconf command to add a separate destination for the new domain.
- B. Use the altrchost command to add a separate gateway for the new domain.
- C. Use the smtproutes command to configure a SMTP route for the new domain.
- D. Use the deli very config command to configure mail delivery for the new domain.
Answer: C
NEW QUESTION 33
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?
- A. Map the envelope sender address to the host.
- B. Issue the altsrchost command.
- C. Apply a filter on the message.
- D. Set up the interface group with the flag.
Answer: B
NEW QUESTION 34
Which two are configured in the DMARC verification profile? (Choose two.)
- A. name of the verification profile
- B. ESA listeners to use the verification profile
- C. message action into an incoming or outgoing content filter
- D. minimum number of signatures to verify
- E. message action to take when the policy is reject/quarantine
Answer: A,E
NEW QUESTION 35
Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)
- A. SLA monitor
- B. failover
- C. active-active
- D. active-standby
- E. load balancing
Answer: B,E
Explanation:
Explanation
You can enter multiple host names to configure the LDAP servers for failover or load-balancing. Separate multiple entries with commas.
NEW QUESTION 36
......
Cisco 300-720 certified specialist salary
- England: 67290 Pound
- Europe: 74405 Euro
- India: 6599343 INR
- United States: 87915 USD
Get to the Top with 300-720 Practice Exam Questions: https://prepaway.testkingpass.com/300-720-testking-dumps.html