Ultimate Guide to Prepare 300-720 Certification Exam for CCNP Security in 2021
Use Real 300-720 Dumps - Cisco Correct Answers updated on 2021
NEW QUESTION 13
Which action is a valid fallback when a client certificate is unavailable during SMTP authentication on Cisco ESA?
- A. LDAP BIND
- B. SMTP AUTH
- C. SMTP TLS
- D. LDAP Query
Answer: B
NEW QUESTION 14 
Refer to the exhibit. An engineer needs to change the existing Forged Email Detection message filter so that it references a newly created dictionary named 'Executives'.
What should be done to accomplish this task?
- A. Change fed' to "Executives".
- B. Change "TESF to "Executives".
- C. Change "support" to "Executives".
- D. Change "from" to "Executives".
Answer: C
NEW QUESTION 15
Which suboption must be selected when LDAP is configured for Spam Quarantine End-User Authentication?
- A. Entity ID
- B. Update Frequency
- C. Server Priority
- D. Designate as the active query
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-5/user_guide/ b_SMA_Admin_Guide_11_5/b_SMA_Admin_Guide_11_5_chapter_01010.html
NEW QUESTION 16
When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?
- A. 90 seconds
- B. 120 seconds
- C. 30 seconds
- D. 60 seconds
Answer: D
NEW QUESTION 17
When URL logging is configured on a Cisco ESA, which feature must be enabled first?
- A. senderbase reputation filter
- B. antispam
- C. antivirus
- D. virus outbreak filter
Answer: D
NEW QUESTION 18
What is the default HTTPS port when configuring spam quarantine on Cisco ESA?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/ b_ESA_Admin_Guide_ces_11_1/b_ESA_Admin_Guide_chapter_011111.pdf
NEW QUESTION 19
Which two actions are configured on the Cisco ESA to query LDAP servers? (Choose two.)
- A. route
- B. delay
- C. relay
- D. reject
- E. accept
Answer: A,E
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-0/user_guide_fs/ b_ESA_Admin_Guide_11_0/b_ESA_Admin_Guide_chapter_011010.html
NEW QUESTION 20
Which action on the Cisco ESA provides direct access to view the safelist/blocklist?
- A. Show the SLBL cache on the CLI.
- B. Monitor Incoming/Outgoing Listener.
- C. Debug the mail flow policy.
- D. Export the SLBL to a .csv file.
Answer: D
NEW QUESTION 21
What is the purpose of Cisco Email Encryption on Cisco ESA?
- A. to ensure integrity between a sender and MTA
- B. to ensure anonymity between a recipient and MTA
- C. to ensure privacy between Cisco ESA and MTA
- D. to authenticate direct communication between a sender and Cisco ESA
Answer: C
NEW QUESTION 22
When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?
- A. Enabling the End-User Safelist/Blocklist feature
- B. Spam Quarantine Alias Consolidation Query
- C. Spam Quarantine External Authentication Query
- D. Spam Quarantine End-User Authentication Query
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure- esa-00.html
NEW QUESTION 23
Which global setting is configured under Cisco ESA Scan Behavior?
- A. actions for unscannable messages due to attachment type
- B. attachment scanning timeout
- C. minimum attachment size to scan
- D. minimum depth of attachment recursion to scan
Answer: B
NEW QUESTION 24
An email containing a URL passes through the Cisco ESA that has content filtering disabled for all mail policies. The sender is [email protected], the recipients are [email protected], [email protected], [email protected], and [email protected]. The subject of the email is Test Document395898847. An administrator wants to add a policy to ensure that the Cisco ESA evaluates the web reputation score before permitting this email.
Which two criteria must be used by the administrator to achieve this? (Choose two.)
- A. Sender matches test1.com
- B. Email does not match [email protected]
- C. Date and time of email
- D. Email body contains a URL
- E. Subject contains Test Document"
Answer: D,E
NEW QUESTION 25
Which two components must be configured to perform DLP scanning? (Choose two.)
- A. Add a DLP policy on the Incoming Mail Policy.
- B. Enable a DLP policy on the DLP Policy Customizations.
- C. Enable a DLP policy on the Outgoing Mail Policy.
- D. Add a DLP policy to the Outgoing Content Filter.
- E. Add a DLP policy to the DLP Policy Manager.
Answer: C,E
NEW QUESTION 26
Which two query types are available when an LDAP profile is configured? (Choose two.)
- A. proxy consolidation
- B. routing
- C. group
- D. user
- E. recursive
Answer: B,C
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011010.html
NEW QUESTION 27
When virtual gateways are configured, which two distinct attributes are allocated to each virtual gateway address? (Choose two.)
- A. DNS server address
- B. IP address
- C. external spam quarantine
- D. DHCP server address
- E. domain
Answer: B,E
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118542-qa-esa- 00.html
NEW QUESTION 28
Which benefit does enabling external spam quarantine on Cisco SMA provide?
- A. ability to scan messages by using two engines to increase a catch rate
- B. access to the spam quarantine interface on which a user can release, duplicate, or delete
- C. ability to back up spam quarantine from multiple Cisco ESAs to one central console
- D. ability to consolidate spam quarantine data from multiple Cisco ESA to one central console
Answer: D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-0/ user_guide/b_SMA_Admin_Guide/b_SMA_Admin_Guide_chapter_010101.html
NEW QUESTION 29
Which process is skipped when an email is received from safedomain.com, which is on the safelist?
- A. message filter
- B. antivirus scanning
- C. antispam scanning
- D. outbreak filter
Answer: A
NEW QUESTION 30
An engineer is configuring an SMTP authentication profile on a Cisco ESA which requires certificate verification.
Which section must be configured to accomplish this goal?
- A. Verification Profiles
- B. Outgoing Mail Policies
- C. Sending Profiles
- D. Mail Flow Policies
Answer: D
NEW QUESTION 31
......
CCNP Security -300-720 Exam-Practice-Dumps: https://www.exams4sures.com/Cisco/300-720-practice-exam-dumps.html
300-720 Premium Files Test pdf - Free Dumps Collection: https://drive.google.com/open?id=1yvkBlQ9lP33iG9jQyhjhs3kAc6GQkLIR