Cisco CCNP Security 300-720 Questions & Answers

• Question 101:

  When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)

  A. redirect

  B. return

  C. drop

  D. delay

  E. abandon

  Correct Answer: AD

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01110.html

• Question 102:

  Which type of attack is prevented by configuring file reputation filtering and file analysis features?

  A. denial of service

  B. zero-day

  C. backscatter

  D. phishing

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010000.html#con_1809885

• Question 103:

  When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?

  A. AAAA record

  B. PTR record

  C. TXT record

  D. MX record

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213939-esa-configure-dkim-signing.html

• Question 104:

  Which attack is mitigated by using Bounce Verification?

  A. spoof

  B. denial of service

  C. eavesdropping

  D. smurf

  Correct Answer: B

  Reference: https://www.networkworld.com/article/2305394/ironport-adds-bounce-back-verification-for-e-mail.html

• Question 105:

  Which feature must be configured before an administrator can use the outbreak filter for nonviral threats?

  A. quarantine threat level

  B. antispam

  C. data loss prevention

  D. antivirus

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01110.html

• Question 106:

  An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level."

  What is the cause of this error?

  A. Content filters are configured at the machine-level on esa1.

  B. DLP is configured at the cluster-level on esa2.

  C. DLP is configured at the domain-level on esa1.

  D. DLP is not configured on host1.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118026-technote-esa-00.html

• Question 107:

  Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?

  A. Set up the interface group with the flag.

  B. Issue the altsrchost command.

  C. Map the envelope sender address to the host.

  D. Apply a filter on the message.

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html#con_1133810

• Question 108:

  How does the graymail safe unsubscribe feature function?

  A. It strips the malicious content of the URI before unsubscribing.

  B. It checks the URI reputation and category and allows the content filter to take an action on it.

  C. It redirects the end user who clicks the unsubscribe button to a sandbox environment to allow a safe unsubscribe.

  D. It checks the reputation of the URI and performs the unsubscribe process on behalf of the end user.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200383-Graymail-Detection-and-Safe-Unsubscribin.html

• Question 109:

  Which type of query must be configured when setting up the Spam Quarantine while merging notifications?

  A. Spam Quarantine Alias Routing Query

  B. Spam Quarantine Alias Consolidation Query

  C. Spam Quarantine Alias Authentication Query

  D. Spam Quarantine Alias Masquerading Query

  Correct Answer: B

• Question 110:

  Which two factors must be considered when message filter processing is configured? (Choose two.)

  A. message-filter order

  B. lateral processing

  C. structure of the combined packet

  D. mail policies

  E. MIME structure of the message

  Correct Answer: AE

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01000.html