Get Apr-2023 updated 300-720 Certification Exam Sample Questions
300-720 Study Guide Cover to Cover as Literally
NEW QUESTION 57
An administrator is managing multiple Cisco ESA devices and wants to view the quarantine emails from all devices in a central location.
How is this accomplished?
- A. Configure a mail policy to determine whether the message is sent to the local or external quarantine.
- B. Disable the VOF feature before sending SPAM to the external quarantine.
- C. Configure a user policy to determine whether the message is sent to the local or external quarantine.
- D. Disable the local quarantine before sending SPAM to the external quarantine.
Answer: A
NEW QUESTION 58
Which two factors must be considered when message filter processing is configured? (Choose two.)
- A. mail policies
- B. structure of the combined packet
- C. MIME structure of the message
- D. message-filter order
- E. lateral processing
Answer: C,D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01000.html
NEW QUESTION 59
An Encryption Profile has been set up on the Cisco ESA.
Drag and drop the steps from the left for creating an outgoing content filter to encrypt emails that contains the subject "Secure:" into the correct order on the right.
Answer:
Explanation:
Reference:
https://community.cisco.com/t5/email-security/keyword-in-subject-line-to-encrypt-message/td-p/2441383
NEW QUESTION 60
A recent engine update was pulled down for graymail and has caused the service to start crashing. It is critical to fix this as quickly as possible.
What must be done to address this issue?
- A. Download another update from the Service Updates page.
- B. Download another update from the IMS and Graymail page.
- C. Roll back to a previous version of the engine from the Services Overview page.
- D. Roll back to a previous version of the engine from the System Health page.
Answer: C
NEW QUESTION 61
Which two query types are available when an LDAP profile is configured? (Choose two.)
- A. recursive
- B. group
- C. proxy consolidation
- D. user
- E. routing
Answer: B,E
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011010.html
NEW QUESTION 62
Refer to the exhibit. How should this configuration be modified to stop delivering Zero Day malware attacks?
- A. Change Unscannable Action from Deliver As Is to Quarantine.
- B. Apply Prepend on Modify Message Subject under Malware Attachments.
- C. Change File Analysis Pending action from Deliver As Is to Quarantine.
- D. Configure mailbox auto-remediation.
Answer: D
NEW QUESTION 63
An Encryption Profile has been set up on the Cisco ESA.
Drag and drop the steps from the left for creating an outgoing content filter to encrypt emails that contains the subject "Secure:" into the correct order on the right.
Answer:
Explanation:
NEW QUESTION 64 
Refer to the exhibit. What is the correct order of commands to set filter 2 to active?
- A. filters-> modify-> All-> Active
- B. filters-> set-> 2-> 1
- C. filters-> detail-> 2-> 1
- D. filters-> edit-> 2-> Active
Answer: B
NEW QUESTION 65
An engineer is configuring a Cisco ESA for the first time and needs to ensure that any email traffic coming from the internal SMTP servers is relayed out through the Cisco ESA and is tied to the Outgoing Mail Policies.
Which Mail Flow Policy setting should be modified to accomplish this goal?
- A. Bounce Detection Signing
- B. Connection Behavior
- C. Exception List
- D. Reverse Connection Verification
Answer: B
Explanation:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118136-qanda-esa-
00.html
NEW QUESTION 66
Which two certificate authority lists are available in Cisco ESA? (Choose two.)
- A. default
- B. user
- C. custom
- D. demo
- E. system
Answer: C,E
NEW QUESTION 67
What is the maximum message size that can be configured for encryption on the Cisco ESA?
- A. 15 MB
- B. 30 MB
- C. 25 MB
- D. 20 MB
Answer: C
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa13-
0/user_guide/b_ESA_Admin_Guide_13-0.pdf P.580
NEW QUESTION 68
Refer to the exhibit. What is the correct order of commands to set filter 2 to active?
- A. filters-> modify-> All-> Active
- B. filters-> set-> 2-> 1
- C. filters-> detail-> 2-> 1
- D. filters-> edit-> 2-> Active
Answer: B
NEW QUESTION 69
DRAG DROP
Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.
Select and Place:
Answer:
Explanation:
Explanation/Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/ b_ESA_Admin_Guide_11_1_chapter_010101.html
NEW QUESTION 70
Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)
- A. active-active
- B. load balancing
- C. SLA monitor
- D. active-standby
- E. failover
Answer: B,E
Explanation:
Explanation
You can enter multiple host names to configure the LDAP servers for failover or load-balancing. Separate multiple entries with commas.
NEW QUESTION 71
When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?
- A. MX record
- B. AAAA record
- C. PTR record
- D. TXT record
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213939-esa- configure-dkim-signing.html
NEW QUESTION 72
A network administrator notices that there are a high number of queries to the LDAP server. The mail logs show an entry "550 Too many invalid recipients | Connection closed by foreign host." Which feature must be used to address this?
- A. DHAP
- B. LDAP
- C. SMTP
- D. SBRS
Answer: C
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-
0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011010.html
NEW QUESTION 73
A network administrator notices that there are a high number of queries to the LDAP server. The mail logs show an entry "550 Too many invalid recipients | Connection closed by foreign host." Which feature must be used to address this?
- A. DHAP
- B. LDAP
- C. SMTP
- D. SBRS
Answer: C
NEW QUESTION 74
When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?
- A. Spam Quarantine End-User Authentication Query
- B. Spam Quarantine Alias Consolidation Query
- C. Spam Quarantine External Authentication Query
- D. Enabling the End-User Safelist/Blocklist feature
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure- esa-00.html
NEW QUESTION 75 
Refer to the exhibit. An engineer is trying to connect to a Cisco ESA using SSH and has been unsuccessful.
Upon further inspection, the engineer notices that there is a loss of connectivity to the neighboring switch.
Which connection method should be used to determine the configuration issue?
- A. Telnet
- B. HTTPS
- C. Ethernet
- D. serial
Answer: D
NEW QUESTION 76
What is the default HTTPS port when configuring spam quarantine on Cisco ESA?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION 77
Refer to the exhibits. What must be done to enforce end user authentication before accessing quarantine?
- A. Change the end user quarantine access setting from None authentication to Mailbox.
- B. Enable SPAM Quarantine Notification and add the %quarantine_url% variable.
- C. Enable SPAM notification and use LDAP for authentication.
- D. Change the end user quarantine access from None authentication to SAAS.
Answer: C
Explanation:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure- esa-00.html#anc7
NEW QUESTION 78
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?
- A. Apply a filter on the message.
- B. Issue the altsrchost command.
- C. Map the envelope sender address to the host.
- D. Set up the interface group with the flag.
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-
1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html#con_1133
810
NEW QUESTION 79
Which feature utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco ESA?
- A. Talos Reputation Filtering
- B. Connection Reputation Filtering
- C. SenderBase Reputation Filtering
- D. SpamCop Reputation Filtering
Answer: C
NEW QUESTION 80
......
Details about 300-720 Test
The Cisco 300-720 exam appears in the list of concentration tests that lead to the CCNP Security. This implies that you only attempt it after succeeding in 350-701 test that deals with matters to do with core technologies. Overall, you are given 1.5 hours to answer all the questions coming in the real exam, which is available in both English & Japanese. The test, in particular, will assess your understanding of the Cisco ESA in different areas. This includes administration, how well you can handle spam control as well as anti-spam, message filters, preventing the loss of data, and LDAP. You will also be tested on how to authenticate emails and encrypt them as well as matters to do with system quarantines in addition to delivery methods.
100% Real & Accurate 300-720 Questions and Answers with Free and Fast Updates: https://www.actual4labs.com/Cisco/300-720-actual-exam-dumps.html
Get Unlimited Access to 300-720 Certification Exam Cert Guide: https://drive.google.com/open?id=1J6VBPpizddOrKlw6WU69NyXXXfqUBvvB