[Aug-2024] Valid Way To Pass Cisco Exam Dumps with 300-720 Exam Study Guide [Q71-Q95]

4/5 - (2 votes)

[Aug-2024] Valid Way To Pass Cisco Exam Dumps with 300-720 Exam Study Guide

All 300-720 Dumps and Securing Email with Cisco Email Security Appliance Training Courses Help candidates to study and pass the Exams hassle-free!

Cisco 300-720 is a certification exam that focuses on securing email with Cisco Email Security Appliance. 300-720 exam is designed to test the candidate’s knowledge and skills in implementing and managing Cisco Email Security Appliance, which is a powerful tool in protecting an organization’s email system against spam, viruses, phishing attacks, and other cyber threats.

Cisco 300-720 certification exam is an excellent way for security professionals, network administrators, and engineers to validate their expertise in email security and demonstrate their ability to use the Cisco Email Security Appliance to secure their organization’s email. By passing 300-720 exam, candidates can enhance their career prospects and demonstrate their commitment to keeping their organization’s email safe and secure.

Q71. What is the default behavior of any listener for TLS communication?

preferred-verify

off

preferred

required

Q72. Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?

Set up the interface group with the flag.

Issue the altsrchost command.

Map the envelope sender address to the host.

Apply a filter on the message.

Q73. Which suboption must be selected when LDAP is configured for Spam Quarantine End-User Authentication?

Designate as the active query

Update Frequency

Server Priority

Entity ID

Q74. An administrator is trying to enable centralized PVO but receives the error, “Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level.” What is the cause of this error?

Content filters are configured at the machine-level on esa1.

DLP is configured at the cluster-level on esa2.

DLP is configured at the domain-level on esa1.

DLP is not configured on host1.

Q75. When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)

redirect

return

drop

delay

abandon

Q76. What is the default method of remotely accessing a newly deployed Cisco Secure Email Virtual Gateway when a DHCP server is not available?

Manual configuration of an IP address is required through the serial port before remote access

DHCP is required for the initial IP address assignment

Use the IP address of 192.168 42 42 via the Management port

Manual configuration of an IP address is required through the hypervisor console before remote access

Q77.

Refer to the exhibits. What must be done to enforce end user authentication before accessing quarantine?

Enable SPAM notification and use LDAP for authentication.

Enable SPAM Quarantine Notification and add the %quarantine_url% variable.

Change the end user quarantine access from None authentication to SAAS.

Change the end user quarantine access setting from None authentication to Mailbox.

Q78. Which two features are applied to either incoming or outgoing mail policies? (Choose two.)

Indication of Compromise

application filtering

outbreak filters

sender reputation filtering

antivirus

Q79. Which two certificate authority lists are available in Cisco ESA? (Choose two.)

default

system

user

custom

demo

Q80. Which components are required when encrypting SMTP with TLS on a Cisco Secure Email Gateway appliance when the sender requires TLS verification?

DER certificate and matching public key from a CA

self-signed certificate in PKCS#7 format

X. 509 certificate and matching private key from a CA

self-signed certificate in PKCS#12 format

Q81. Refer to the exhibit. An engineer is trying to connect to a Cisco ESA using SSH and has been unsuccessful. Upon further inspection, the engineer notices that there is a loss of connectivity to the neighboring switch.
Which connection method should be used to determine the configuration issue?

Telnet

HTTPS

Ethernet

serial

Q82. A Cisco Secure Email Gateway administrator recently enabled the Outbreak Filters Global Service Setting to detect Viral as well as Non-Viral threat detection, with no detection of Non-viral threats after 24 hours of monitoring Outbreak Filters What is the reason that Non-Viral threat detection is not detecting any positive verdicts?

Non-Viral threat detection requires Antivirus or AMP enablement to properly function

The Outbreak Filters option Graymail Header must be enabled

Non-Viral threat detection requires AntiSpam or Intelligent Multi-Scan enablement to properly function.

The Outbreak Filters option URL Rewriting must be enabled.

Q83. Refer to the exhibit. An engineer needs to change the existing Forged Email Detection message filter so that it references a newly created dictionary named ‘Executives’.
What should be done to accomplish this task?

Change “from” to “Executives”.

Change “TESF to “Executives”.

Change fed’ to “Executives”.

Change “support” to “Executives”.

Q84. Which benefit does enabling external spam quarantine on Cisco SMA provide?

ability to back up spam quarantine from multiple Cisco ESAs to one central console

access to the spam quarantine interface on which a user can release, duplicate, or delete

ability to scan messages by using two engines to increase a catch rate

ability to consolidate spam quarantine data from multiple Cisco ESA to one central console

Q85. The CEO sent an email indicating that all emails containing a string of 123ABCDEFGHJ cannot be delivered and must be sent into quarantine for further inspection. Given the requirement, which regular expression should be used to match on that criteria?

\D{3}[A-Z]{9}

d{3}[A-Z]{9}

W{3}[A-Z]{9}

{3}d{9}[A-Z]

Q86. An administrator identifies that, over the past week, the Cisco ESA is receiving many emails from certain senders and domains which are being consistently quarantined. The administrator wants to ensure that these senders and domain are unable to send anymore emails.
Which feature on Cisco ESA should be used to achieve this?

incoming mail policies

safelist

blocklist

S/MIME Sending Profile

Q87. An engineer wants to ensure that emails received by company users that contain URLs do not make them susceptible to data loss from accessing malicious or undesired external content sources Which two features must be configured on Cisco Secure Email Gateway to meet this requirement1? (Choose two.)

antispam scanning

data loss prevention

graymail detection

URL filtering

antivirus scanning

Q88. An administrator is trying to enable centralized PVO but receives the error, “Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level.” What is the cause of this error?

Content filters are configured at the machine-level on esa1.

DLP is configured at the cluster-level on esa2.

DLP is configured at the domain-level on esa1.

DLP is not configured on host1.

Q89. What is the default behavior of any listener for TLS communication?

preferred-verify

off

preferred

required

Q90. An administrator is managing multiple Cisco ESA devices and wants to view the quarantine emails from all devices in a central location.
How is this accomplished?

Disable the VOF feature before sending SPAM to the external quarantine.

Configure a mail policy to determine whether the message is sent to the local or external quarantine.

Disable the local quarantine before sending SPAM to the external quarantine.

Configure a user policy to determine whether the message is sent to the local or external quarantine.

Q91.

Refer to the exhibit. What is the correct order of commands to set filter 2 to active?