Cisco CCNP Security 300-720 Questions & Answers

• Question 51:

  What is the purpose of Cisco Email Encryption on Cisco ESA?

  A. to ensure anonymity between a recipient and MTA

  B. to ensure integrity between a sender and MTA

  C. to authenticate direct communication between a sender and Cisco ESA

  D. to ensure privacy between Cisco ESA and MTA

  Correct Answer: D

• Question 52:

  Which component must be added to the content filter to trigger on failed SPF Verification or DKIM Authentication verdicts?

  A. status

  B. response

  C. parameter

  D. condition

  Correct Answer: D

• Question 53:

  An organization wants to use DMARC to improve its brand reputation by leveraging DNS records. Which two email authentication mechanisms are utilized during this process? (Choose two.)

  A. SPF

  B. DSTP

  C. DKIM

  D. TLS

  E. PKI

  Correct Answer: AC

  Reference: https://www.cisco.com/c/en/us/products/security/what-is-dmarc.html

• Question 54:

  An engineer is tasked with reviewing mail logs to confirm that messages sent from domain abc.com are passing SPF verification and being accepted by the Cisco ESA. The engineer notices that SPF verification is not being performed and that SPF is not being referenced in the logs for messages sent from domain abc.com.

  Why is the verification not working properly?

  A. SPF verification is disabled in the Recipient Access Table.

  B. SPF verification is disabled on the Mail Flow Policy.

  C. The SPF conformance level is set to SIDF compatible on the Mail Flow Policy.

  D. An SPF verification Content Filter has not been created.

  Correct Answer: D

• Question 55:

  An engineer is configuring a Cisco ESA for the first time and needs to ensure that any email traffic coming from the internal SMTP servers is relayed out through the Cisco ESA and is tied to the Outgoing Mail Policies. Which Mail Flow Policy setting should be modified to accomplish this goal?

  A. Exception List

  B. Connection Behavior

  C. Bounce Detection Signing

  D. Reverse Connection Verification

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118136-qanda-esa-00.html

• Question 56:

  An organization wants to use its existing Cisco ESA to host a new domain and enforce a separate corporate policy for that domain. What should be done on the Cisco ESA to achieve this?

  A. Use the smtproutes command to configure a SMTP route for the new domain.

  B. Use the deliveryconfig command to configure mail delivery for the new domain.

  C. Use the dsestconf command to add a separate destination for the new domain.

  D. Use the altrchost command to add a separate gateway for the new domain.

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011001.html

• Question 57:

  An engineer is configuring an SMTP authentication profile on a Cisco ESA which requires certificate verification. Which section must be configured to accomplish this goal?

  A. Mail Flow Policies

  B. Sending Profiles

  C. Outgoing Mail Policies

  D. Verification Profiles

  Correct Answer: A

• Question 58:

  Refer to the exhibit.

  

  Which configuration on the scan behavior must be updated to allow the attachment to be scanned on the Cisco ESA?

  A. Add an additional mapping for attachment type for zip files.

  B. Enable assume match pattern if the email was not scanned for any reason.

  C. Increase the maximum recursion depth from 5 to a larger value.

  D. Increase the maximum attachment size to scan to a larger value.

  Correct Answer: A

• Question 59:

  Users have been complaining of a higher volume of emails containing profanity. The network administrator will need to leverage dictionaries and create specific conditions to reduce the number of inappropriate emails.

  Which two filters should be configured to address this? (Choose two.)

  A. message

  B. spam

  C. VOF

  D. sender group

  E. content

  Correct Answer: BE

• Question 60:

  Refer to the exhibit.

  

  What is the correct order of commands to set filter 2 to active?

  A. filters-> edit-> 2-> Active

  B. filters-> modify-> All-> Active

  C. filters-> detail-> 2-> 1

  D. filters-> set-> 2-> 1

  Correct Answer: D