Cisco CCNP Security 300-720 Questions & Answers

• Question 131:

  Which benefit does enabling external spam quarantine on Cisco SMA provide?

  A. ability to back up spam quarantine from multiple Cisco ESAs to one central console

  B. access to the spam quarantine interface on which a user can release, duplicate, or delete

  C. ability to scan messages by using two engines to increase a catch rate

  D. ability to consolidate spam quarantine data from multiple Cisco ESA to one central console

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-0/user_guide/b_SMA_Admin_Guide/b_SMA_Admin_Guide_chapter_010101.html

• Question 132:

  When email authentication is configured on Cisco ESA, which two key types should be selected on the signing profile? (Choose two.)

  A. DKIM

  B. Public Keys

  C. Domain Keys

  D. Symmetric Keys

  E. Private Keys

  Correct Answer: AC

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213939-esa-configure-dkim-signing.html

• Question 133:

  Which feature utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco ESA?

  A. SenderBase Reputation Filtering

  B. Connection Reputation Filtering

  C. Talos Reputation Filtering

  D. SpamCop Reputation Filtering

  Correct Answer: A

• Question 134:

  When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?

  A. Enabling the End-User Safelist/Blocklist feature

  B. Spam Quarantine External Authentication Query

  C. Spam Quarantine End-User Authentication Query

  D. Spam Quarantine Alias Consolidation Query

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure-esa-00.html

• Question 135:

  Which SMTP extension does Cisco ESA support for email security?

  A. ETRN

  B. UTF8SMTP

  C. PIPELINING

  D. STARTTLS

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011000.html

• Question 136:

  DRAG DROP

  An administrator must ensure that emails sent from [email protected] are routed through an alternate virtual gateway. Drag and drop the snippet from the bottom onto the blank in the graphic to finish the message filter syntax. Not all snippets are used.

  Select and Place:

  

  Correct Answer:

  

• Question 137:

  DRAG DROP

  Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_010101.html

• Question 138:

  DRAG DROP

  Drag and drop the Cisco ESA reactions to a possible DLP from the left onto the correct action types on the right.

  Select and Place:

  

  Correct Answer:

  

  Reference:

  https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010001.html (message actions)

• Question 139:

  DRAG DROP

  Drag and drop the steps to configure Cisco ESA to use SPF/SIDF verification from the left into the correct order on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 140:

  DRAG DROP

  An Encryption Profile has been set up on the Cisco ESA.

  Drag and drop the steps from the left for creating an outgoing content filter to encrypt emails that contains the subject "Secure:" into the correct order on the right.

  Select and Place:

  

  Correct Answer:

  

  Reference: https://community.cisco.com/t5/email-security/keyword-in-subject-line-to-encrypt-message/td-p/2441383