300-720 practice test

1. Question 1 · 1

   Which SMTP extension does Cisco ESA support for email security?

   Choose one answer.

   • ETRN
   • UTF8SMTP
   • PIPELINING
   • STARTTLS

2. Question 2 · 1

   A network administrator enabled McAfee antivirus scanning on a Cisco ESA and configured the virus scanning action of “scan for viruses only.” If the scanner finds a virus in an attachment for an incoming email, what action will be applied to this message?

   Choose one answer.

   • The attachment is dropped and replaced with a “Removed Attachment” file.
   • The email and attachment are forwarded to the network administrator.
   • The system will attempt to repair the attachment.
   • No repair is attempted, and the attachment is either dropped or delivered.

3. Question 3 · 1

   Refer to the exhibit. For improved security, an administrator wants to warn users about opening any links or attachments within an email. How must the administrator configure an HTML-coded message at the top of an email body to create this warning?

   Choose one answer.

   

   • Create a text resource type of Notification Template, change to code view to paste the HTML code into the text box, then use this text resource inside a content filter.
   • Create a text resource type of Disclaimer Template, change to code view to paste the HTML code into the text box, then use this text resource inside a content filter.
   • Create a text resource type of Disclaimer Template, past the HTML code into the text box, then use this text resource inside a content filter.
   • Create a text resource type of Notification Template, past the HTML code into the text box, then use this text resource inside a content filter.

4. Question 4 · 1

   An engineer is tasked with creating a content filter to catch attachments, including credit card numbers, and hold them for review until further action is taken. Which component on a Cisco ESA must be configured to meet this requirement?

   Choose one answer.

   • Spam Quarantine
   • Outbreak Filter
   • Policy Quarantine
   • Content Filter

5. Question 5 · 1

   A list of company executives is routinely being spoofed, which puts the company at risk of malicious email attacks. An administrator must ensure that executive messages are originating from legitimate sending addresses. Which two steps must be taken to accomplish this task? (Choose two.)

   Choose all answers that apply.

   • Create an incoming content filter with SPF detection.
   • Create a content dictionary including a list of the names that are being spoofed.
   • Enable the Forged Email Detection feature under Security Settings.
   • Enable DMARC feature under Mail Policies.
   • Create an incoming content filter with the Forged Email Detection condition.

6. Question 6 · 1

   Refer to the exhibit. Which configuration allows the Cisco ESA to scan for executables inside the zip and apply the action as per the content filter?

   Choose one answer.

   

   • Modify the content filter to look for .exe filename instead of executable filetype.
   • Configure the recursion depth to a higher value.
   • Configure the maximum attachment size to a higher value.
   • Modify the content filter to look for attachment filetype of compressed.

7. Question 7 · 1

   A network engineer is implementing a virus outbreak filter on a Cisco ESA by using the Outbreak Filters feature with plans to perform an additional scan by using a content filter. Which action must be taken by the Outbreak Filters?

   Choose one answer.

   • Scan processed messages by using two engines simultaneously.
   • Send a copy of messages to quarantine.
   • Send processed messages to the Cisco ESA.
   • Scan processed messages by using a secondary instance of the Cisco ESA.

8. Question 8 · 1

   An organization wants to prevent proprietary patent documents from being shared externally via email. The network administrator reviewed the DLP policies on the Cisco ESA and could not find an existing policy with the appropriate matching patterns. Which type of DLP policy template must be used to create a policy that meets this requirement?

   Choose one answer.

   • regulatory compliance
   • acceptable use
   • custom policy
   • privacy protection

9. Question 9 · 1

   An administrator notices that incoming emails with certain attachments do not get delivered to all recipients when the emails have multiple recipients in different domains like cisco.com and test.com. The same emails when sent only to recipients in cisco.com are delivered properly. How must the Cisco ESA be configured to avoid this behavior?

   Choose one answer.

   • Modify DLP configuration to ensure that all attachments are permitted for test.com.
   • Modify DLP configuration to exempt DLP scanning for messages sent to test.com domain.
   • Modify mail policies so email recipients do not match multiple policies.
   • Modify mail policies for cisco.com to ensure that emails are not dropped.

10. Question 10 · 1

    Which content filter condition checks to see if the “From: header” in the message is similar to any of the users in the content dictionary?

    Choose one answer.

    • SPF Verification
    • Duplicate Boundaries Verification
    • Forged Email Detection
    • Subject Header

11. Question 11 · 1

    A network administrator notices that there are a high number of queries to the LDAP server. The mail logs show an entry “550 Too many invalid recipients | Connection closed by foreign host.” Which feature must be used to address this?

    Choose one answer.

    • DHAP
    • SBRS
    • LDAP
    • SMTP

12. Question 12 · 1

    An engineer is configuring a Cisco ESA for the first time and needs to ensure that any email traffic coming from the internal SMTP servers is relayed out through the Cisco ESA and is tied to the Outgoing Mail Policies. Which Mail Flow Policy setting should be modified to accomplish this goal?

    Choose one answer.

    • Exception List
    • Connection Behavior
    • Bounce Detection Signing
    • Reverse Connection Verification

13. Question 13 · 1

    An organization wants to use its existing Cisco ESA to host a new domain and enforce a separate corporate policy for that domain. What should be done on the Cisco ESA to achieve this?

    Choose one answer.

    • Use the smtproutes command to configure a SMTP route for the new domain.
    • Use the deliveryconfig command to configure mail delivery for the new domain.
    • Use the dsestconf command to add a separate destination for the new domain.
    • Use the altrchost command to add a separate gateway for the new domain.

14. Question 14 · 1

    An engineer is configuring an SMTP authentication profile on a Cisco ESA which requires certificate verification. Which section must be configured to accomplish this goal?

    Choose one answer.

    • Mail Flow Policies
    • Sending Profiles
    • Outgoing Mail Policies
    • Verification Profiles

15. Question 15 · 1

    What is the default primary email attribute used in a spam quarantine end-user authentication query when using LDAP authentication to an Active Directory server?

    Choose one answer.

    • userAccount
    • mailLocalAddress
    • sAMAccountName
    • proxyAddresses

Paid access to all 92 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.