Cisco CCNP Security 300-720 Questions & Answers

• Question 141:

  What are the two different phases in the process of Cisco Secure Email Gateway performing S/MIME encryption? (Choose two.)

  A. Attach the encrypted public key to the message

  B. Encrypt the message body using the session key

  C. Send the encrypted message to the sender

  D. Attach the encrypted symmetric key to the message

  E. Create a pseudo-random session key

  Correct Answer: DE

• Question 142:

  A company has recently updated their security policy and now wants to drop all email messages larger than 100 MB coming from external sources. The Cisco Secure Email Gateway is LDAP integrated and all employee accounts are in the

  group "Employees".

  Which filter rule configuration provides the desired outcome?

  A. if (mail-from-group == 'Employees') and (body-size > "100M") {drop()}

  B. if (mail-from-group != 'Employees') and (body-size > 100M) {drop();}

  C. if (mail-from-group == 'Employees') and (body-size > 100M) {bounce();}

  D. if ('mail-from-group != Employees') and (body-size > 100M) {drop();}

  Correct Answer: A

• Question 143:

  A security administrator deployed a Cisco Secure Email Gateway appliance with a mail policy configured to store suspected spam for review. The appliance is the DMZ and only the standard HTTP/HTTPS ports are allowed by the firewall. An administrator wants to ensure that users can view any suspected spam that was blocked. Which action must be taken to meet this requirement?

  A. Enable the external Spam Quarantine and enter the IP address and port for the Secure Email and Web Manager

  B. Enable the Spam Quarantine and leave the default settings unchanged

  C. Enable End-User Quarantine Access and point to an LDAP server for authentication

  D. Enable the Spam Quarantine and specify port 80 for HTTP and port 443 for HTTPS

  Correct Answer: C

  Enabling End-User Quarantine Access and pointing to an LDAP server for authentication is the action that must be taken to meet this requirement. End-User Quarantine Access is a feature that allows users to access their personal quarantine

  on Cisco ESA using their email address and password, without requiring an administrator account or access to Secure Email and Web Manager.

  To enable End-User Quarantine Access on Cisco ESA, the administrator can follow these steps:

  Select Security Services > IronPort Anti-Spam > End User Safelist/Blocklist Settings and click Edit Settings.

  Under End User Quarantine Access, select Enable End User Quarantine Access.

  Under Authentication Server, select LDAP Server from the drop-down menu and choose an LDAP server profile from the drop-down menu.

  Click Submit.

• Question 144:

  What is a benefit of deploying Cisco Secure Email and Web Manager?

  A. centralized management of software updates for Cisco Secure Email Gateway

  B. centralized management of logs for Cisco Secure Email Gateway

  C. centralized management of quarantined email

  D. centralized management of botnet directories

  Correct Answer: C

  One of the benefits of deploying Cisco Secure Email and Web Manager is that it provides centralized management of quarantined email for multiple Cisco Secure Email Gateway appliances. The administrator can use the Cisco Secure Email and Web Manager to view, search, release, delete, or forward quarantined messages from a single web interface. References: [Cisco Secure Email and Web Manager User Guide - Configuring Centralized Spam Quarantine]

• Question 145:

  A trusted partner of an organization recently experienced a new campaign that was leveraging JavaScript attachments to trick users into executing malware. As a result, they created a local policy to deny messages with JavaScript attachments. Which action should the administrator of the organization take to ensure encrypted communications are delivered to the intended partner recipient?

  A. Insert the X-PostX-Use-Script' header with a value of false to the encrypted messages

  B. Select JavaScript-free' option within the Cisco Secure Email Encryption Service Add-in

  C. Create an outgoing content filter and add the Encrypt and Deliver Nov/ action with Use-Script option deselected

  D. Create a new encryption profile and deselect the 'Use-Script' envelope settings option

  Correct Answer: D

• Question 146:

  DRAG DROP

  Drag and drop the graymail descriptions from the left onto the verdict categories they belong to on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 147:

  DRAG DROP

  Drag and drop the SMTP Call-Ahead Server Profile Settings from the left onto the descriptions on the right.

  Select and Place:

  

  Correct Answer:

  

• Question 148:

  DRAG DROP

  Drag and drop authentication options for End-User Quarantine Access from the left onto the corresponding configuration steps on the right.

  Select and Place:

  

  Correct Answer: