Cisco CCNP Security 300-720 Questions & Answers

• Question 91:

  Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)

  A. load balancing

  B. SLA monitor

  C. active-standby

  D. failover

  E. active-active

  Correct Answer: AD

  You can enter multiple host names to configure the LDAP servers for failover or load-balancing. Separate multiple entries with commas.

  Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/sma_user_guide/b_SMA_Admin_Guide_ces_11/b_SMA_Admin_Guide_chapter_01010.html

• Question 92:

  What is the default port to deliver emails from the Cisco ESA to the Cisco SMA using the centralized Spam Quarantine?

  A. 8025

  B. 6443

  C. 6025

  D. 8443

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure-esa-00.html

• Question 93:

  Which two steps are needed to disable local spam quarantine before external quarantine is enabled? (Choose two.)

  A. Uncheck the Enable Spam Quarantine check box.

  B. Select Monitor and click Spam Quarantine.

  C. Check the External Safelist/Blocklist check box.

  D. Select External Spam Quarantine and click on Configure.

  E. Select Security Services and click Spam Quarantine.

  Correct Answer: AB

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118555-qa-esa-00.html (configuration summary)

• Question 94:

  Which Cisco ESA security service is configured only through an outgoing mail policy?

  A. antivirus

  B. DLP

  C. Outbreak Filters

  D. AMP

  Correct Answer: B

  Reference https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-0/user_guide_fs/b_ESA_Admin_Guide_11_0/b_ESA_Admin_Guide_chapter_01001.html

• Question 95:

  Which two components must be configured to perform DLP scanning? (Choose two.)

  A. Add a DLP policy on the Incoming Mail Policy.

  B. Add a DLP policy to the DLP Policy Manager.

  C. Enable a DLP policy on the Outgoing Mail Policy.

  D. Enable a DLP policy on the DLP Policy Customizations.

  E. Add a DLP policy to the Outgoing Content Filter.

  Correct Answer: BC

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_010001.html

• Question 96:

  Which two certificate authority lists are available in Cisco ESA? (Choose two.)

  A. default

  B. system

  C. user

  D. custom

  E. demo

  Correct Answer: BD

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_011000.html#task_1194859

• Question 97:

  Which two are configured in the DMARC verification profile? (Choose two.)

  A. name of the verification profile

  B. minimum number of signatures to verify

  C. ESA listeners to use the verification profile

  D. message action into an incoming or outgoing content filter

  E. message action to take when the policy is reject/quarantine

  Correct Answer: AE

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_010101.html#task_1231917

• Question 98:

  Which two components form the graymail management solution in Cisco ESA? (Choose two.)

  A. cloud-based unsubscribe service

  B. uniform unsubscription management interface for end users

  C. secure subscribe option for end users

  D. integrated graymail scanning engine

  E. improved mail efficacy

  Correct Answer: AD

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01101.pdf (p.2)

• Question 99:

  What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?

  A. provisioned email encryption profile

  B. message encryption from a content filter that select "Message Encryption" over TLS

  C. message encryption from the mail flow policies with "CRES" selected

  D. content filter to forward the email to the Cisco Registered Envelope server

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010010.html

• Question 100:

  Which two features are applied to either incoming or outgoing mail policies? (Choose two.)

  A. Indication of Compromise

  B. application filtering

  C. outbreak filters

  D. sender reputation filtering

  E. antivirus

  Correct Answer: CE

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html