Check the Available 300-720 Exam Dumps with 149 QA's UPDATED 2024
Download 300-720 Exam Dumps Questions to get 100% Success in Cisco
Cisco 300-720 exam is part of the Cisco Certified Specialist - Email Content Security certification track. It is a 90-minute exam that consists of 60-70 questions, and the passing score is 750 out of 1000. 300-720 exam tests the candidate's knowledge in various areas such as email security architecture, email content filtering, message tracking, email authentication, and encryption. Successful candidates will have the skills and knowledge required to implement and maintain secure email systems that meet business and regulatory requirements.
NEW QUESTION # 13
Which two Cisco ESA features are used to control email delivery based on the sender? (Choose two.)
- A. incoming mail policies
- B. spam quarantine
- C. safelists
- D. blocklists
- E. outbreak filter
Answer: C,D
NEW QUESTION # 14
An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level." What is the cause of this error?
- A. DLP is configured at the cluster-level on esa2.
- B. DLP is not configured on host1.
- C. DLP is configured at the domain-level on esa1.
- D. Content filters are configured at the machine-level on esa1.
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118026-technote- esa-00.html
NEW QUESTION # 15
Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)
- A. Message filters can be configured only from the web user interface.
- B. The filterconfig command executed from the CLI is used to configure message filters.
- C. Message filters configuration within the web user interface is located within Incoming Content Filters.
- D. The filters command executed from the CLI is used to configure the message filters.
- E. Message filters can be configured only from the CLI.
Answer: D,E
Explanation:
Message filters can only be applied to the ESA via command line. So, you will need command line access to the ESA.
Log into the ESA via command line.
Run the following highlighted commands to apply the message filter to the ESA:
ironport.example.com> filters
Choose the operation you want to perform:
- NEW - Create a new filter.
- IMPORT - Import a filter script from a file.
[]> NEW
Enter filter script. Enter '.' on its own line to end.
large_spam_no_attachment:
if ((body-size > 2097152) AND NOT (attachment-size > 0)) {
quarantine("large_spam");
log-entry("*****This is a large message with no attachments*****");
}
.
1 filters added.
NEW QUESTION # 16
How does the graymail safe unsubscribe feature function?
- A. It strips the malicious content of the URI before unsubscribing.
- B. It redirects the end user who clicks the unsubscribe button to a sandbox environment to allow a safe unsubscribe.
- C. It checks the reputation of the URI and performs the unsubscribe process on behalf of the end user.
- D. It checks the URI reputation and category and allows the content filter to take an action on it.
Answer: C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200383- Graymail-Detection-and-Safe-Unsubscribin.html
NEW QUESTION # 17 
Refer to the exhibit. An engineer is trying to connect to a Cisco ESA using SSH and has been unsuccessful.
Upon further inspection, the engineer notices that there is a loss of connectivity to the neighboring switch.
Which connection method should be used to determine the configuration issue?
- A. Ethernet
- B. Telnet
- C. serial
- D. HTTPS
Answer: C
NEW QUESTION # 18
An engineer is tasked with reviewing mail logs to confirm that messages sent from domain abc.com are passing SPF verification and being accepted by the Cisco ESA. The engineer notices that SPF verification is not being performed and that SPF is not being referenced in the logs for messages sent from domain abc.com.
Why is the verification not working properly?
- A. SPF verification is disabled in the Recipient Access Table.
- B. SPF verification is disabled on the Mail Flow Policy.
- C. The SPF conformance level is set to SIDF compatible on the Mail Flow Policy.
- D. An SPF verification Content Filter has not been created.
Answer: D
NEW QUESTION # 19
An organization has multiple Cisco Secure Email Gateway appliances deployed, resulting in several spam quarantines to manage. To manage the quarantined messages, the administrator enabled the centralized spam quarantine on the Cisco Secure Email and Web Manager appliance and configured the external spam quarantine on the Cisco Secure Email Gateway appliances. However, messages are still being directed to the local quarantine on the Cisco Secure Email Gateway appliances What change is necessary to complete the configuration?
- A. Modify the incoming mail policies on the Cisco Secure Email Gateway appliances to redirect to the external quarantine
- B. Disable the local spam quarantine on the Cisco Secure Email Gateway appliances.
- C. Disable the external spam quarantine on the Cisco Secure Email Gateway appliances
- D. Modify the external spam quarantine settings on the Cisco Secure Email Gateway appliances and change the port to 25
Answer: B
Explanation:
To use the centralized spam quarantine on the Cisco Secure Email and Web Manager appliance, the administrator must disable the local spam quarantine on the Cisco Secure Email Gateway appliances. This will prevent messages from being stored in both quarantines and avoid confusion for end users and administrators. Reference: [Cisco Secure Email and Web Manager User Guide - Configuring Centralized Spam Quarantine]
NEW QUESTION # 20
What is the maximum message size that can be configured for encryption on the Cisco ESA?
- A. 30 MB
- B. 15 MB
- C. 20 MB
- D. 25 MB
Answer: D
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa13-
0/user_guide/b_ESA_Admin_Guide_13-0.pdf P.580
NEW QUESTION # 21
Which attack is mitigated by using Bounce Verification?
- A. spoof
- B. eavesdropping
- C. smurf
- D. denial of service
Answer: D
Explanation:
Bounce Verification is a feature that mitigates denial of service attacks on Cisco ESA. A denial of service attack is an attempt to overwhelm a system or network with excessive traffic or requests, rendering it unavailable or slow for legitimate users. Bounce Verification prevents Cisco ESA from accepting bounce messages that are not generated by itself or by trusted hosts, reducing the load on the system and preventing backscatter spam.
NEW QUESTION # 22
When virtual gateways are configured, which two distinct attributes are allocated to each virtual gateway address? (Choose two.)
- A. domain
- B. DNS server address
- C. DHCP server address
- D. IP address
- E. external spam quarantine
Answer: A,D
Explanation:
Virtual gateways are a feature that allows Cisco ESA to host multiple email domains on a single physical interface, using different IP addresses and hostnames for each domain.
When virtual gateways are configured, two distinct attributes are allocated to each virtual gateway address:
Domain, which is the email domain name that is associated with the virtual gateway address, such as mycompany.com or mydomain.com.
IP address, which is the IPv4 or IPv6 address that is assigned to the virtual gateway address, such as 199.209.31.X or 2001:db8::X.
The other options are not attributes that are allocated to each virtual gateway address on Cisco ESA.
NEW QUESTION # 23
Drag and Drop Question
Drag and drop the Cisco ESA reactions to a possible DLP from the left onto the correct action types on the right.
Answer:
Explanation:
NEW QUESTION # 24
When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?
- A. Spam Quarantine External Authentication Query
- B. Enabling the End-User Safelist/Blocklist feature
- C. Spam Quarantine End-User Authentication Query
- D. Spam Quarantine Alias Consolidation Query
Answer: C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692- configure-esa-00.html
NEW QUESTION # 25
When the Cisco ESA is configured to use Centralized Message Tracking, which default port is used between the device and the Cisco Security Management Appliance?
- A. port 53/UDP
- B. port 22/TCP
- C. port 23/TCP
- D. port 25/UDP
- E. port 80/UDP
Answer: B
NEW QUESTION # 26
Which attack is mitigated by using Bounce Verification?
- A. spoof
- B. eavesdropping
- C. smurf
- D. denial of service
Answer: D
Explanation:
Explanation/Reference: https://www.networkworld.com/article/2305394/ironport-adds-bounce-back-verification-for-e- mail.html
NEW QUESTION # 27 
Refer to the exhibit. What is the correct order of commands to set filter 2 to active?
- A. filters-> modify-> All-> Active
- B. filters-> edit-> 2-> Active
- C. filters-> set-> 2-> 1
- D. filters-> detail-> 2-> 1
Answer: C
NEW QUESTION # 28
Refer to the exhibit.
For improved security, an administrator wants to warn users about opening any links or attachments within an email How must the administrator configure an HTML-coded message at the top of an email body to create this warning?
- A. Create a text resource type of Disclaimer Template change to code view to paste the HTML code into the text box, then use this text resource inside a content filter
- B. Create a text resource type of Notification Template, change to code view to paste the HTML code into the text box. then use this text resource inside a content filter.
- C. Create a text resource type of Notification Template, paste the HTML code into the text box, then use this text resource inside a content filter.
- D. Create a text resource type of Disclaimer Template paste the HTML code into the text box. then use this text resource inside a content filter
Answer: A
Explanation:
According to the [Cisco Secure Email User Guide], you can create a text resource of type Disclaimer Template and use the code view option to insert HTML code into the text box. Then, you can use this text resource in a content filter to prepend or append the HTML message to the email body[1, p. 15-16].
The other options are not valid because:
A) Creating a text resource type of Disclaimer Template and pasting the HTML code into the text box without changing to code view will not work, as the HTML code will be treated as plain text and not rendered properly[1, p. 15].
C) Creating a text resource type of Notification Template and pasting the HTML code into the text box will not work, as Notification Templates are used for sending notifications to senders or recipients, not for modifying the email body[1, p. 17].
D) Creating a text resource type of Notification Template and changing to code view to paste the HTML code into the text box will not work, as Notification Templates are used for sending notifications to senders or recipients, not for modifying the email body[1, p. 17].
NEW QUESTION # 29
When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?
- A. 120 seconds
- B. 60 seconds
- C. 90 seconds
- D. 30 seconds
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html
NEW QUESTION # 30
......
Best Value Available! 2024 Realistic Verified Free 300-720 Exam Questions: https://www.actualtests4sure.com/300-720-test-questions.html
100% Accurate Answers! 300-720 Actual Real Exam Questions: https://drive.google.com/open?id=1ul6Q8wAfb_Nmzurn5OfDWtG4-s_smWaD
