TAKE CCNP Security 300-720 PRACTICE QUESTIONS FOR AMAZING RESULTS [Q37-Q55]

300-720 Cisco

admin • February 14, 2023

TAKE CCNP Security 300-720 PRACTICE QUESTIONS FOR AMAZING RESULTS [Q37-Q55]

Rate this post

TAKE CCNP Security 300-720 PRACTICE QUESTIONS FOR AMAZING RESULTS

Cisco 300-720 Exam Dumps Are Essential To Get Good Marks

Q37. What are two primary components of content filters? (Choose two.)

conditions

subject

content

actions

policies

Q38. Which benefit does enabling external spam quarantine on Cisco SMA provide?

ability to back up spam quarantine from multiple Cisco ESAs to one central console

access to the spam quarantine interface on which a user can release, duplicate, or delete

ability to scan messages by using two engines to increase a catch rate

ability to consolidate spam quarantine data from multiple Cisco ESA to one central console

Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-0/ user_guide/b_SMA_Admin_Guide/b_SMA_Admin_Guide_chapter_010101.html

Q39. Which ESA feature is used to apply smart identifiers?

Content filters

RSA data loss prevention engine

Encryption policies

Text resources

Q40. Which two components form the graymail management solution in Cisco ESA? (Choose two.)

cloud-based unsubscribe service

uniform unsubscription management interface for end users

secure subscribe option for end users

integrated graymail scanning engine

improved mail efficacy

Q41. What is the maximum message size that can be configured for encryption on the Cisco ESA?

20 MB

25 MB

15 MB

30 MB

Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117972-technote- esa-00.html

Q42. An analyst creates a new content dictionary to use with Forged Email Detection.
Which entry will be added into the dictionary?

mycompany.com

Alpha Beta

^Alpha Beta$

[email protected]

Q43. Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.

Q44. Refer to the exhibit. How should this configuration be modified to stop delivering Zero Day malware attacks?

Change Unscannable Action from Deliver As Is to Quarantine.

Change File Analysis Pending action from Deliver As Is to Quarantine.

Configure mailbox auto-remediation.

Apply Prepend on Modify Message Subject under Malware Attachments.

Q45. Which two query types are available when an LDAP profile is configured? (Choose two.)

proxy consolidation

user

recursive

group

routing

Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011010.html

Q46. Which setting affects the aggressiveness of spam detection?

protection level

spam threshold

spam timeout

maximum depth of recursion scan

Q47. Which Cisco ESA security service is configured only through an outgoing mail policy?

antivirus

DLP

Outbreak Filters

AMP

Q48. Which global setting is configured under Cisco ESA Scan Behavior?

minimum attachment size to scan

attachment scanning timeout

actions for unscannable messages due to attachment type

minimum depth of attachment recursion to scan

Q49. A company has deployed a new mandate that requires all emails sent externally from the Sales Department to be scanned by DLP for PCI-DSS compliance. A new DLP policy has been created on the Cisco ESA and needs to be assigned to a mail policy named `Sales’ that has yet to be created.
Which mail policy should be created to accomplish this task?

Outgoing Mail Policy

Preliminary Mail Policy

Incoming Mail Flow Policy

Outgoing Mail Flow Policy

https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-
0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010001.html#task_140
94

Q50. Which process is skipped when an email is received from safedomain.com, which is on the safelist?

message filter

antivirus scanning

outbreak filter

antispam scanning

Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/214269-filter-to- handle-messages-that-skipped-d.html

Q51. Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)

The filters command executed from the CLI is used to configure the message filters.

Message filters configuration within the web user interface is located within Incoming Content Filters.

The filterconfig command executed from the CLI is used to configure message filters.

Message filters can be configured only from the CLI.

Message filters can be configured only from the web user interface.

Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213940-esa-using-a- message-filter-to-take-act.html

Q52. When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?

Enabling the End-User Safelist/Blocklist feature

Spam Quarantine External Authentication Query

Spam Quarantine End-User Authentication Query

Spam Quarantine Alias Consolidation Query

Q53. When configuring CRES, where do you enable read receipts?

In the encryption profile

In the content filter condition menu

In the content filter action menu

In the mail policy

Q54. What is the order of virus scanning when multilayer antivirus scanning is configured?

The default engine scans for viruses first and the McAfee engine scans for viruses second.

The Sophos engine scans for viruses first and the McAfee engine scans for viruses second.

The McAfee engine scans for viruses first and the default engine scans for viruses second.

The McAfee engine scans for viruses first and the Sophos engine scans for viruses second.

Explanation
If you configure multi-layer anti-virus scanning, the Cisco appliance performs virus scanning with the McAfee engine first and the Sophos engine second. It scans messages using both engines, unless the McAfee engine detects a virus. If the McAfee engine detects a virus, the Cisco appliance performs the anti-virus actions (repairing, quarantining, etc.) defined for the mail policy.

Q55. Which antispam feature is utilized to give end users control to allow emails that are spam to be delivered to their inbox, overriding any spam verdict and action on the Cisco ESA?

end user allow list

end user spam quarantine access

end user passthrough list

end user safelist

Loading …