2021 Updated 300-720 Tests Engine pdf - All Free Dumps Guaranteed!
Latest CCNP Security 300-720 Actual Free Exam Questions
NEW QUESTION 23 
Refer to the exhibit. What is the correct order of commands to set filter 2 to active?
- A. filters-> edit-> 2-> Active
- B. filters-> set-> 2-> 1
- C. filters-> modify-> All-> Active
- D. filters-> detail-> 2-> 1
Answer: B
NEW QUESTION 24
Which antispam feature is utilized to give end users control to allow emails that are spam to be delivered to their inbox, overriding any spam verdict and action on the Cisco ESA?
- A. end user allow list
- B. end user passthrough list
- C. end user safelist
- D. end user spam quarantine access
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/b_ESA_Admin_Guide_ces_11_1/b_ESA_Admin_Guide_chapter_011111.pdf
NEW QUESTION 25
An administrator has created a content filter to quarantine all messages that result in an SPF hardfail to review the messages and determine whether a trusted partner has accidentally misconfigured the DNS settings. The administrator sets the policy quarantine to release the messages after 24 hours, allowing time to review while not interrupting business.
Which additional option should be used to help the end users be aware of the elevated risk of interacting with these messages?
- A. Modify Subject
- B. Notify Sender
- C. Notify Recipient
- D. Strip Attachments
Answer: A
NEW QUESTION 26
Which two query types are available when an LDAP profile is configured? (Choose two.)
- A. proxy consolidation
- B. group
- C. user
- D. routing
- E. recursive
Answer: B,D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011010.html
NEW QUESTION 27
Which benefit does enabling external spam quarantine on Cisco SMA provide?
- A. ability to scan messages by using two engines to increase a catch rate
- B. ability to back up spam quarantine from multiple Cisco ESAs to one central console
- C. ability to consolidate spam quarantine data from multiple Cisco ESA to one central console
- D. access to the spam quarantine interface on which a user can release, duplicate, or delete
Answer: C
NEW QUESTION 28
Which attack is mitigated by using Bounce Verification?
- A. smurf
- B. eavesdropping
- C. denial of service
- D. spoof
Answer: C
Explanation:
Explanation/Reference: https://www.networkworld.com/article/2305394/ironport-adds-bounce-back-verification-for-e- mail.html
NEW QUESTION 29
Which two actions are configured on the Cisco ESA to query LDAP servers? (Choose two.)
- A. reject
- B. accept
- C. delay
- D. route
- E. relay
Answer: B,D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-0/user_guide_fs/ b_ESA_Admin_Guide_11_0/b_ESA_Admin_Guide_chapter_011010.html
NEW QUESTION 30
Which type of query must be configured when setting up the Spam Quarantine while merging notifications?
- A. Spam Quarantine Alias Routing Query
- B. Spam Quarantine Alias Consolidation Query
- C. Spam Quarantine Alias Authentication Query
- D. Spam Quarantine Alias Masquerading Query
Answer: B
NEW QUESTION 31
Which two features are applied to either incoming or outgoing mail policies? (Choose two.)
- A. outbreak filters
- B. Indication of Compromise
- C. antivirus
- D. sender reputation filtering
- E. application filtering
Answer: A,C
NEW QUESTION 32
What are two prerequisites for implementing undesirable URL protection in Cisco ESA? (Choose two.)
- A. Enable antivirus scanning.
- B. Enable antispam scanning.
- C. Enable port bouncing.
- D. Enable outbreak filters.
- E. Enable email relay.
Answer: B,D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01111.html
NEW QUESTION 33
Which two steps configure Forged Email Detection? (Choose two.)
- A. Enable Forged Email Detection on the Security Services page.
- B. Configure a content dictionary with friendly names.
- C. Configure a content dictionary with executive email addresses.
- D. Configure a filter to use the Forged Email Detection rule and dictionary.
- E. Configure a filter to check the Header From value against the Forged Email Detection dictionary.
Answer: C,D
Explanation:
Explanation/Reference: https://explore.cisco.com/esa-feature-enablement/user-guide-for-async-11
NEW QUESTION 34
Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)
- A. The filterconfig command executed from the CLI is used to configure message filters.
- B. Message filters configuration within the web user interface is located within Incoming Content Filters.
- C. Message filters can be configured only from the web user interface.
- D. Message filters can be configured only from the CLI.
- E. The filters command executed from the CLI is used to configure the message filters.
Answer: D,E
NEW QUESTION 35
Which two factors must be considered when message filter processing is configured? (Choose two.)
- A. mail policies
- B. lateral processing
- C. MIME structure of the message
- D. message-filter order
- E. structure of the combined packet
Answer: C,D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01000.html
NEW QUESTION 36
Which two features are applied to either incoming or outgoing mail policies? (Choose two.)
- A. outbreak filters
- B. Indication of Compromise
- C. antivirus
- D. sender reputation filtering
- E. application filtering
Answer: A,C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html
NEW QUESTION 37
Which two are configured in the DMARC verification profile? (Choose two.)
- A. message action into an incoming or outgoing content filter
- B. name of the verification profile
- C. message action to take when the policy is reject/quarantine
- D. ESA listeners to use the verification profile
- E. minimum number of signatures to verify
Answer: B,C
NEW QUESTION 38
A Cisco ESA administrator has several mail policies configured. While testing policy match using a specific sender, the email was not matching the expected policy.
What is the reason of this?
- A. The message header with the highest priority is checked against the Default policy in a top-down fashion.
- B. The Tram* header is checked against all policies in a top-down fashion.
- C. The message header with the highest priority is checked against each policy in a top-down fashion.
- D. The To" header is checked against all policies in a top-down fashion.
Answer: A
NEW QUESTION 39
Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)
- A. SLA monitor
- B. failover
- C. load balancing
- D. active-standby
- E. active-active
Answer: B,C
Explanation:
You can enter multiple host names to configure the LDAP servers for failover or load-balancing. Separate multiple entries with commas.
Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/sma_user_guide/ b_SMA_Admin_Guide_ces_11/b_SMA_Admin_Guide_chapter_01010.html
NEW QUESTION 40
Which global setting is configured under Cisco ESA Scan Behavior?
- A. minimum attachment size to scan
- B. attachment scanning timeout
- C. minimum depth of attachment recursion to scan
- D. actions for unscannable messages due to attachment type
Answer: B
NEW QUESTION 41
Which action must be taken before a custom quarantine that is being used can be deleted?
- A. Delete only the unused quarantine.
- B. Delete the quarantine that is assigned to a filter.
- C. Delete the quarantine that is not assigned to a filter.
- D. Remove the quarantine from the message action of a filter.
Answer: D
NEW QUESTION 42
......
Target Audience
The Cisco 300-720 is designed for people who work around Email security and other networking domains. Some of the specialists who are targeted by this test include security engineers, network administrators, network architects, network engineers, and more.
300-720 Dumps Updated Practice Test and 92 unique questions: https://www.examsreviews.com/300-720-pass4sure-exam-review.html
Latest 100% Exam Passing Ratio - 300-720 Dumps PDF: https://drive.google.com/open?id=1Xdi6M1qhaFN0bwF9sbK9HpDq8ZNCNclX