Securing Email with Cisco Email Security Appliance (300-720) Free Practice Test

Question 1

A network engineer is implementing a virus outbreak filter on a Cisco ESA by using the Outbreak Filters feature with plans to perform an additional scan by using a content filter. Which action must be taken by the Outbreak Filters?

A. Send processed messages to the Cisco ESA.

B. Scan processed messages by using a secondary instance of the Cisco ESA.

C. Send a copy of messages to quarantine.

D. Scan processed messages by using two engines simultaneously.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

Which canonicalization setting must be used to change the header names to lowercase and strip empty lines at the end of the body without further body modifications when configuring a DomainKeys Identified Mail signing profile in the Cisco Secure Email Gateway?

A. Headers: relaxed
Body: relaxed

B. Headers: simple
Body: relaxed

C. Headers: simple
Body: simple

D. Headers: relaxed
Body: simple

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

A recent engine update was pulled down for graymail and has caused the service to start crashing. It is critical to fix this as quickly as possible.
What must be done to address this issue?

A. Roll back to a previous version of the engine from the Services Overview page.

B. Download another update from the Service Updates page.

C. Roll back to a previous version of the engine from the System Health page.

D. Download another update from the IMS and Graymail page.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Drag and Drop Question
Drag and drop the graymail descriptions from the left onto the verdict categories they belong to on the right.

Correct Answer:

Question 5

A security administrator deployed a Cisco Secure Email Gateway appliance with a mail policy configured to store suspected spam for review. The appliance is the DMZ and only the standard HTTP/HTTPS ports are allowed by the firewall. An administrator wants to ensure that users can view any suspected spam that was blocked. Which action must be taken to meet this requirement?

A. Enable the Spam Quarantine and specify port 80 for HTTP and port 443 for HTTPS

B. Enable the external Spam Quarantine and enter the IP address and port for the Secure Email and Web Manager

C. Enable the Spam Quarantine and leave the default settings unchanged.

D. Enable End-User Quarantine Access and point to an LDAP server for authentication.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

What is the purpose of checking the CRL during SMTP authentication on a Cisco ESA?

A. Confirm that corresponding CA is present.

B. Check if the certificate is not revoked.

C. Validate the date to check if the certificate is still valid.

D. Verify the common name matches user ID.

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

A company's CFO is requesting the email administrator create an exception for graymail from a certain yoga studio's weekly newsletter. Which category of graymail does this fall under?

A. Marketing

B. Sales

C. Social Network

D. Mass

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

Users have been complaining of a higher volume of emails containing profanity. The network administrator will need to leverage dictionaries and create specific conditions to reduce the number of inappropriate emails.
Which two filters should be configured to address this? (Choose two.)

A. VOF

B. sender group

C. content

D. message

E. spam

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

Which two components must be configured to perform DLP scanning? (Choose two.)

A. Enable a DLP policy on the DLP Policy Customizations.

B. Add a DLP policy on the Incoming Mail Policy.

C. Enable a DLP policy on the Outgoing Mail Policy.

D. Add a DLP policy to the DLP Policy Manager.

E. Add a DLP policy to the Outgoing Content Filter.

Correct Answer: C,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)

A. The filterconfig command executed from the CLI is used to configure message filters.

B. Message filters can be configured only from the CLI.

C. Message filters configuration within the web user interface is located within Incoming Content Filters.

D. The filters command executed from the CLI is used to configure the message filters.

E. Message filters can be configured only from the web user interface.

Correct Answer: B,D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)

A. drop

B. return

C. abandon

D. delay

E. redirect

Correct Answer: D,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

An engineer is configuring an SMTP authentication profile on a Cisco ESA which requires certificate verification.
Which section must be configured to accomplish this goal?

A. Outgoing Mail Policies

B. Verification Profiles

C. Mail Flow Policies

D. Sending Profiles

Correct Answer: C

Question 13

Drag and Drop Question
An engineer must enable SIDF for a mail flow policy on an incoming listener in Cisco Secure Email Gateway. Drag and drop the actions from the left into the sequence on the right to meet the requirement.

Correct Answer:

Explanation:
This order ensures the mail flow policy is selected first, then its parameters are configured, SPF/SIDF verification is enabled, and finally, the required conformance level is set.

Question 14

A partner's mail server frequently sends large volumes of legitimate email. Administrators want to bypass anti-spam scanning but still inspect messages for malware and DLP violations. What is the best solution?

A. Create a custom Mail Flow Policy

B. Disable Anti-Spam globally

C. Add the partner to RAT

D. Configure a custom SMTP Route

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 15

Which feature must be activated on a Cisco ESA to combat backscatter?

A. Forged Email Detection

B. Bounce Profile

C. Graymail Detection

D. Bounce Verification

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Cisco Securing Email with Cisco Email Security Appliance (300-720) Free Practice Test