Cisco CCNP Security 300-720 Questions & Answers

• Question 81:

  Which scenario prevents a message from being sent to the quarantine as an action in the scan behavior on Cisco ESA?

  A. A policy quarantine is missing.

  B. More than one email pipeline is defined.

  C. The "modify the message subject" is already set.

  D. The "add custom header" action is performed first.

  Correct Answer: B

• Question 82:

  What are two primary components of content filters? (Choose two.)

  A. conditions

  B. subject

  C. content

  D. actions

  E. policies

  Correct Answer: AD

  Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/b_ESA_Admin_Guide_ces_11_1/b_ESA_Admin_Guide_chapter_01010.pdf

• Question 83:

  When virtual gateways are configured, which two distinct attributes are allocated to each virtual gateway address? (Choose two.)

  A. domain

  B. IP address

  C. DNS server address

  D. DHCP server address

  E. external spam quarantine

  Correct Answer: AB

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118542-qa-esa-00.html

• Question 84:

  When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

  A. 30 seconds

  B. 90 seconds

  C. 60 seconds

  D. 120 seconds

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html

• Question 85:

  Which global setting is configured under Cisco ESA Scan Behavior?

  A. minimum attachment size to scan

  B. attachment scanning timeout

  C. actions for unscannable messages due to attachment type

  D. minimum depth of attachment recursion to scan

  Correct Answer: B

  Reference: https://community.cisco.com/t5/email-security/cisco-ironport-esa-security-services-scan-behavior-impact-on-av/td-p/3923243

• Question 86:

  When URL logging is configured on a Cisco ESA, which feature must be enabled first?

  A. antivirus

  B. antispam

  C. virus outbreak filter

  D. senderbase reputation filter

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote-esa-00.html (note under enable url filtering)

• Question 87:

  What is the default HTTPS port when configuring spam quarantine on Cisco ESA?

  A. 83

  B. 82

  C. 443

  D. 80

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/b_ESA_Admin_Guide_ces_11_1/b_ESA_Admin_Guide_chapter_011111.pdf

• Question 88:

  What is a benefit of implementing URL filtering on the Cisco ESA?

  A. removes threats from malicious URLs

  B. blacklists spam

  C. provides URL reputation protection

  D. enhances reputation against malicious URLs

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote-esa-00.html

• Question 89:

  Refer to the exhibit.

  

  Which SPF record is valid for mycompany.com?

  A. v=spf1 a mx ip4:199.209.31.2 -all

  B. v=spf1 a mx ip4:10.1.10.23 -all

  C. v=spf1 a mx ip4:199.209.31.21 -all

  D. v=spf1 a mx ip4:172.16.18.230 -all

  Correct Answer: D

• Question 90:

  What is a valid content filter action?

  A. decrypt on delivery

  B. quarantine

  C. skip antispam

  D. archive

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01010.html#con_1158022