300-720 Online Practice Questions and Answers

DRAG DROP

Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.

Select and Place:

Which SMTP extension does Cisco ESA support for email security?

A. ETRN

B. UTF8SMTP

C. PIPELINING

D. STARTTLS

What is the order of virus scanning when multilayer antivirus scanning is configured?

A. The default engine scans for viruses first and the McAfee engine scans for viruses second.

B. The Sophos engine scans for viruses first and the McAfee engine scans for viruses second.

C. The McAfee engine scans for viruses first and the default engine scans for viruses second.

D. The McAfee engine scans for viruses first and the Sophos engine scans for viruses second.

Which antispam feature is utilized to give end users control to allow emails that are spam to be delivered to their inbox, overriding any spam verdict and action on the Cisco ESA?

A. end user allow list

B. end user spam quarantine access

C. end user passthrough list

D. end user safelist

What is the maximum message size that can be configured for encryption on the Cisco ESA?

A. 20 MB

B. 25 MB

C. 15 MB

D. 30 MB

Which two components must be configured to perform DLP scanning? (Choose two.)

A. Add a DLP policy on the Incoming Mail Policy.

B. Add a DLP policy to the DLP Policy Manager.

C. Enable a DLP policy on the Outgoing Mail Policy.

D. Enable a DLP policy on the DLP Policy Customizations.

E. Add a DLP policy to the Outgoing Content Filter.

What is a valid content filter action?

A. decrypt on delivery

B. quarantine

C. skip antispam

D. archive

An engineer is testing mail flow on a new Cisco ESA and notices that messages for domain abc.com are stuck in the delivery queue. Upon further investigation, the engineer notices that the messages pending delivery are destined for 192.168.1.11, when they should instead be routed to 192.168.1.10.

What configuration change needed to address this issue?

A. Add an address list for domain abc.com.

B. Modify Destination Controls entry for the domain abc.com.

C. Modify the SMTP route for the domain and change the IP address to 192.168.1.10.

D. Modify the Routing Tables and add a route for IP address to 192.168.1.10.

A network administrator notices that there are a high number of queries to the LDAP server. The mail logs show an entry "550 Too many invalid recipients | Connection closed by foreign host." Which feature must be used to address this?

A. DHAP

B. SBRS

C. LDAP

D. SMTP

An organization wants to use its existing Cisco ESA to host a new domain and enforce a separate corporate policy for that domain. What should be done on the Cisco ESA to achieve this?

A. Use the smtproutes command to configure a SMTP route for the new domain.

B. Use the deliveryconfig command to configure mail delivery for the new domain.

C. Use the dsestconf command to add a separate destination for the new domain.

D. Use the altrchost command to add a separate gateway for the new domain.

Refer to the exhibit.

An administrator has configured File Reputation and File Analysis on the Cisco ESA; however, is does not function as expected. What must be configured on the Cisco ESA for this to function?

A. Upload the Root CA certificate for the File Reputation cloud to the Cisco ESA.

B. Open port 443 on the firewall for the Cisco ESA to connect to the File Reputation cloud.

C. Restart the File Reputation service to force the scanning engine to connect to the File Reputation cloud.

D. Configure the Cisco ESA to use SSL for the connection to the File Reputation server.

Refer to the exhibit.

A network engineer must set up a content filter to find any messages that failed SPF and send them into quarantine. The content filter has been set up and enabled, but all messages except those that have failed SPF are being sent into quarantine. Which section of the filter must be modified to correct this behavior?

A. log-entry

B. quarantine

C. spf-status

D. skip-filters

An administrator manipulated the subnet mask but was still unable to access the user interface. How must the administrator access the appliance to perform the initial configuration?

A. Use the data 2 port.

B. Use the serial or console port.

C. Use the data 1 port.

D. Use the management port.

A Cisco ESA administrator is creating a Mail Flow Policy to receive outbound email from Microsoft Exchange. Which Connection Behavior must be selected to properly process the messages?

A. Delay

B. Accept

C. Relay

D. Reject

What must be considered when viewing spam messages addressed to an email alias on Cisco ESA?

A. It is only possible via a link in a notification.

B. It is only possible via a web browser directly.

C. The access is granted via any method.

D. It is impossible via mailbox authentication.