Cisco CCNP Security 300-720 Questions & Answers

• Question 111:

  What occurs when configuring separate incoming mail policies?

  A. message splintering

  B. message exceptions

  C. message detachment

  D. message aggregation

  Correct Answer: A

• Question 112:

  Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)

  A. The filters command executed from the CLI is used to configure the message filters.

  B. Message filters configuration within the web user interface is located within Incoming Content Filters.

  C. The filterconfig command executed from the CLI is used to configure message filters.

  D. Message filters can be configured only from the CLI.

  E. Message filters can be configured only from the web user interface.

  Correct Answer: AD

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213940-esa-using-a-message-filter-to-take-act.html

• Question 113:

  Which two actions are configured on the Cisco ESA to query LDAP servers? (Choose two.)

  A. accept

  B. relay

  C. delay

  D. route

  E. reject

  Correct Answer: AD

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-0/user_guide_fs/b_ESA_Admin_Guide_11_0/b_ESA_Admin_Guide_chapter_011010.html

• Question 114:

  What is the default behavior of any listener for TLS communication?

  A. preferred-verify

  B. off

  C. preferred

  D. required

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118954-config-esa-00.html

• Question 115:

  Which two features of Cisco Email Security are added to a Sender Group to protect an organization against email threats? (Choose two.)

  A. NetFlow

  B. geolocation-based filtering

  C. heuristic-based filtering

  D. senderbase reputation filtering

  E. content disarm and reconstruction

  Correct Answer: CD

• Question 116:

  Which two steps configure Forged Email Detection? (Choose two.)

  A. Configure a content dictionary with executive email addresses.

  B. Configure a filter to use the Forged Email Detection rule and dictionary.

  C. Configure a filter to check the Header From value against the Forged Email Detection dictionary.

  D. Enable Forged Email Detection on the Security Services page.

  E. Configure a content dictionary with friendly names.

  Correct Answer: AB

  Reference: https://explore.cisco.com/esa-feature-enablement/user-guide-for-async-11

• Question 117:

  Email encryption is configured on a Cisco ESA that uses CRES.

  Which action is taken on a message when CRES is unavailable?

  A. It is requeued.

  B. It is sent in clear text.

  C. It is dropped and an error message is sent to the sender.

  D. It is encrypted by a Cisco encryption appliance.

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117863-configure-esa-00.html

• Question 118:

  Which two query types are available when an LDAP profile is configured? (Choose two.)

  A. proxy consolidation

  B. user

  C. recursive

  D. group

  E. routing

  Correct Answer: DE

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011010.html

• Question 119:

  Which action is a valid fallback when a client certificate is unavailable during SMTP authentication on Cisco ESA?

  A. LDAP Query

  B. SMTP AUTH

  C. SMTP TLS

  D. LDAP BIND

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011011.html

• Question 120:

  What is the maximum message size that can be configured for encryption on the Cisco ESA?

  A. 20 MB

  B. 25 MB

  C. 15 MB

  D. 30 MB

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117972-technote-esa-00.html