Cisco CCNP Security 300-720 Questions & Answers

• Question 21:

  An administrator notices that incoming emails with certain attachments do not get delivered to all recipients when the emails have multiple recipients in different domains like cisco.com and test.com. The same emails when sent only to recipients in cisco.com are delivered properly. How must the Cisco ESA be configured to avoid this behavior?

  A. Modify DLP configuration to ensure that all attachments are permitted for test.com.

  B. Modify DLP configuration to exempt DLP scanning for messages sent to test.com domain.

  C. Modify mail policies so email recipients do not match multiple policies.

  D. Modify mail policies for cisco.com to ensure that emails are not dropped.

  Correct Answer: B

• Question 22:

  Which content filter condition checks to see if the "From: header" in the message is similar to any of the users in the content dictionary?

  A. SPF Verification

  B. Duplicate Boundaries Verification

  C. Forged Email Detection

  D. Subject Header

  Correct Answer: C

• Question 23:

  An organization wants to use its existing Cisco ESA to host a new domain and enforce a separate corporate policy for that domain.

  What should be done on the Cisco ESA to achieve this?

  A. Use the smtproutes command to configure a SMTP route for the new domain.

  B. Use the deliveryconfig command to configure mail delivery for the new domain.

  C. Use the dsestconf command to add a separate destination for the new domain.

  D. Use the altrchost command to add a separate gateway for the new domain.

  Correct Answer: A

• Question 24:

  Which feature must be activated on a Cisco ESA to combat backscatter?

  A. Graymail Detection

  B. Bounce Profile

  C. Forged Email Detection

  D. Bounce Verification

  Correct Answer: D

• Question 25:

  What must be considered when viewing spam messages addressed to an email alias on Cisco ESA?

  A. It is only possible via a link in a notification.

  B. It is only possible via a web browser directly.

  C. The access is granted via any method.

  D. It is impossible via mailbox authentication.

  Correct Answer: A

• Question 26:

  Spammers routinely try to send emails with the recipient field filled with a list of all possible combinations of letters and numbers. These combinations, appended with a company's domain name are malicious attempts at learning all possible valid email addresses. Which action must be taken on a Cisco ESA to prevent this from occurring?

  A. Quarantine external authentication queries.

  B. Enable end user safelist features.

  C. Perform LDAP acceptance validation.

  D. Select the SMTP Authentication Query checkbox.

  Correct Answer: C

• Question 27:

  An organization has a strict policy on URLs embedded in emails. The policy allows visibility into what the URL is but does not allow the user to click it. Which action must be taken to meet the requirements of the security policy?

  A. Defang the URL.

  B. Enable the URL quarantine policy.

  C. Replace the URL with text.

  D. Redirect the URL to the Cisco security proxy.

  Correct Answer: D

• Question 28:

  What is a category for classifying graymail?

  A. Priority

  B. Marketing

  C. Malicious

  D. Spam

  Correct Answer: B

• Question 29:

  A network engineer must tighten up the SPAM control policy of an organization due to a recent SPAM attack. In which scenario does enabling regional scanning improve security for this organization?

  A. when most of the received email originates outside of the U.S.

  B. when most of the received email originates from a specific region

  C. when most of the received spam originates outside of the U.S.

  D. when most of the received spam comes from a specific country

  Correct Answer: D

• Question 30:

  A content dictionary was created for use with Forged Email Detection. Proper data that pertains to the CEO "Example CEO" must be entered. What must be added to the dictionary to accomplish this goal?

  A. ceo

  B. Example CEO

  C. [email protected]

  D. example.com

  Correct Answer: C