Use 300-720 Exam Dumps (2021 PDF Dumps) To Have Reliable 300-720 Test Engine
300-720 PDF Recently Updated Questions Dumps to Improve Exam Score
What is Cisco 300-720 Exam
Cisco Certified Network Professional Security (CCNP) security employees manage security in routers, modifications, network tools, and even network environments They must have the ability to protect the network design and implement it using Cisco Secure Access, Edge Network Safety and Security, Risk Control, as well as secure mobility solutions. This exam access your knowledge of the Cisco email security appliance, which includes; Administration, Spam and spam control, Message filters, Data loss prevention LDAP, Email authentication and encryption, System quarantines and delivery methods.
NEW QUESTION 33
Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)
- A. The filterconfig command executed from the CLI is used to configure message filters.
- B. Message filters can be configured only from the CLI.
- C. The filters command executed from the CLI is used to configure the message filters.
- D. Message filters can be configured only from the web user interface.
- E. Message filters configuration within the web user interface is located within Incoming Content Filters.
Answer: B,C
NEW QUESTION 34 
Refer to the exhibit. An engineer needs to change the existing Forged Email Detection message filter so that it references a newly created dictionary named 'Executives'.
What should be done to accomplish this task?
- A. Change "from" to "Executives".
- B. Change "support" to "Executives".
- C. Change fed' to "Executives".
- D. Change "TESF to "Executives".
Answer: B
NEW QUESTION 35
Which two components must be configured to perform DLP scanning? (Choose two.)
- A. Add a DLP policy on the Incoming Mail Policy.
- B. Add a DLP policy to the DLP Policy Manager.
- C. Enable a DLP policy on the Outgoing Mail Policy.
- D. Add a DLP policy to the Outgoing Content Filter.
- E. Enable a DLP policy on the DLP Policy Customizations.
Answer: B,C
NEW QUESTION 36
An administrator identifies that, over the past week, the Cisco ESA is receiving many emails from certain senders and domains which are being consistently quarantined. The administrator wants to ensure that these senders and domain are unable to send anymore emails.
Which feature on Cisco ESA should be used to achieve this?
- A. incoming mail policies
- B. safelist
- C. S/MIME Sending Profile
- D. blocklist
Answer: A
NEW QUESTION 37
When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)
- A. delay
- B. redirect
- C. drop
- D. abandon
- E. return
Answer: A,B
NEW QUESTION 38
Which two certificate authority lists are available in Cisco ESA? (Choose two.)
- A. default
- B. user
- C. demo
- D. custom
- E. system
Answer: D,E
NEW QUESTION 39
Which SMTP extension does Cisco ESA support for email security?
- A. ETRN
- B. PIPELINING
- C. STARTTLS
- D. UTF8SMTP
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011000.html
NEW QUESTION 40
A network administrator notices that there are a high number of queries to the LDAP server. The mail logs show an entry "550 Too many invalid recipients | Connection closed by foreign host." Which feature must be used to address this?
- A. LDAP
- B. SMTP
- C. SBRS
- D. DHAP
Answer: B
NEW QUESTION 41
What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?
- A. provisioned email encryption profile
- B. content filter to forward the email to the Cisco Registered Envelope server
- C. message encryption from the mail flow policies with "CRES" selected
- D. message encryption from a content filter that select "Message Encryption" over TLS
Answer: D
NEW QUESTION 42
Which suboption must be selected when LDAP is configured for Spam Quarantine End-User Authentication?
- A. Update Frequency
- B. Designate as the active query
- C. Server Priority
- D. Entity ID
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-5/user_guide/ b_SMA_Admin_Guide_11_5/b_SMA_Admin_Guide_11_5_chapter_01010.html
NEW QUESTION 43
Which feature utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco ESA?
- A. SenderBase Reputation Filtering
- B. Talos Reputation Filtering
- C. Connection Reputation Filtering
- D. SpamCop Reputation Filtering
Answer: A
NEW QUESTION 44
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?
- A. Map the envelope sender address to the host.
- B. Set up the interface group with the flag.
- C. Issue the altsrchost command.
- D. Apply a filter on the message.
Answer: C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html#con_1133810
NEW QUESTION 45
Which feature must be configured before an administrator can use the outbreak filter for nonviral threats?
- A. antivirus
- B. quarantine threat level
- C. data loss prevention
- D. antispam
Answer: D
NEW QUESTION 46
When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?
- A. PTR record
- B. AAAA record
- C. TXT record
- D. MX record
Answer: C
NEW QUESTION 47
What is the order of virus scanning when multilayer antivirus scanning is configured?
- A. The Sophos engine scans for viruses first and the McAfee engine scans for viruses second.
- B. The McAfee engine scans for viruses first and the Sophos engine scans for viruses second.
- C. The default engine scans for viruses first and the McAfee engine scans for viruses second.
- D. The McAfee engine scans for viruses first and the default engine scans for viruses second.
Answer: D
Explanation:
If you configure multi-layer anti-virus scanning, the Cisco appliance performs virus scanning with the McAfee engine first and the Sophos engine second. It scans messages using both engines, unless the McAfee engine detects a virus. If the McAfee engine detects a virus, the Cisco appliance performs the anti-virus actions (repairing, quarantining, etc.) defined for the mail policy.
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html
NEW QUESTION 48
Which two certificate authority lists are available in Cisco ESA? (Choose two.)
- A. default
- B. user
- C. demo
- D. custom
- E. system
Answer: D,E
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_011000.html#task_1194859
NEW QUESTION 49
A Cisco ESA administrator was notified that a user was not receiving emails from a specific domain. After reviewing the mail logs, the sender had a negative sender-based reputation score.
What should the administrator do to allow inbound email from that specific domain?
- A. Ask the user to add the sender to the email application's allow list.
- B. Add the domain into the allow list.
- C. Create a new inbound mail policy with a message filter that overrides Talos.
- D. Modify the firewall to allow emails from the domain.
Answer: B
NEW QUESTION 50
Which two components form the graymail management solution in Cisco ESA? (Choose two.)
- A. secure subscribe option for end users
- B. uniform unsubscription management interface for end users
- C. cloud-based unsubscribe service
- D. integrated graymail scanning engine
- E. improved mail efficacy
Answer: C,D
NEW QUESTION 51
An analyst creates a new content dictionary to use with Forged Email Detection.
Which entry will be added into the dictionary?
- A. Alpha Beta
- B. mycompany.com
- C. ^Alpha\ Beta$
- D. [email protected]
Answer: B
NEW QUESTION 52
Which benefit does enabling external spam quarantine on Cisco SMA provide?
- A. access to the spam quarantine interface on which a user can release, duplicate, or delete
- B. ability to consolidate spam quarantine data from multiple Cisco ESA to one central console
- C. ability to scan messages by using two engines to increase a catch rate
- D. ability to back up spam quarantine from multiple Cisco ESAs to one central console
Answer: B
NEW QUESTION 53
Which two factors must be considered when message filter processing is configured? (Choose two.)
- A. lateral processing
- B. mail policies
- C. message-filter order
- D. structure of the combined packet
- E. MIME structure of the message
Answer: C,E
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01000.html
NEW QUESTION 54
......
300-720 Dumps Full Questions with Free PDF Questions to Pass: https://www.testkingpass.com/300-720-testking-dumps.html
Free CCNP Security 300-720 Official Cert Guide PDF Download: https://drive.google.com/open?id=1OhBc3xrWggk2h3j491dJaYtvSyUWrqh8