Get Certified Easily with Online 300-720 Dumps

1. Which type of query must be configured when setting up the Spam Quarantine while merging notifications?

2. A network administrator enabled McAfee antivirus scanning on a Cisco Secure Email Gateway and configured the virus scanning action of "scan for viruses only"

If the scanner finds a virus in an attachment for an incoming email, what action will be applied to this message?

3. Email encryption is configured on a Cisco ESA that uses CRES.

Which action is taken on a message when CRES is unavailable?

4. An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters/DLP actions available at a level different from the cluster level."

What is the cause of this error?

5. What is a benefit of implementing URL filtering on the Cisco ESA?

6. When the spam quarantine is configured on the Cisco Secure Email Gateway, which type of query is used to validate non administrative user access to the end-user quarantine via LDAP?

7. The CEO sent an email indicating that all emails containing a string of 123ABCDEFGHJ cannot be delivered and must be sent into quarantine for further inspection.

Given the requirement, which regular expression should be used to match on that criteria?

8. What are organizations trying to address when implementing a SPAM quarantine?

9. An engineer is configuring an SMTP authentication profile on a Cisco ESA which requires certificate verification.

Which section must be configured to accomplish this goal?

10. A Cisco Secure Email Gateway appliance is processing many messages that are sent to invalid recipients verification.

Which two steps are required to accomplish this task? (Choose two.)

11. Which Cisco Secure Email Threat Defense visibility and remediation mode is only available when using Cisco Secure Email Gateway as the message source?

A. Basic Authentication

B. No Authentication

C. Microsoft 365 Authentication

D. Cisco Security Cloud Sign On

12. A Cisco Secure Email Gateway administrator recently enabled the Outbreak Filters Global Service Setting to detect Viral as well as Non-Viral threat detection, with no detection of Non-viral threats after 24 hours of monitoring Outbreak Filters.

What is the reason that Non-Viral threat detection is not detecting any positive verdicts?

A. Non-Viral threat detection requires Antivirus or AMP enablement to properly function

B. The Outbreak Filters option Graymail Header must be enabled

C. Non-Viral threat detection requires AntiSpam or Intelligent Multi-Scan enablement to properly function.

D. The Outbreak Filters option URL Rewriting must be enabled.

13. When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?

14. Which two steps are needed to disable local spam quarantine before external quarantine is enabled? (Choose two.)

15. What is the default HTTPS port when configuring spam quarantine on Cisco ESA?

16. A Cisco ESA administrator was notified that a user was not receiving emails from a specific domain.

After reviewing the mail logs, the sender had a negative sender-based reputation score.

What should the administrator do to allow inbound email from that specific domain?

17. Which two Cisco ESA features are used to control email delivery based on the sender? (Choose two.)

18. An organization wants to prevent proprietary patent documents from being shared externally via email. The network administrator reviewed the DLP policies on the Cisco Secure Email Gateway and could not find an existing policy with the appropriate matching patterns.

Which type of DLP policy template must be used to create a policy that meets this requirement?

19. Which two query types are available when an LDAP profile is configured? (Choose two.)

20. Which suboption must be selected when LDAP is configured for Spam Quarantine End-User Authentication?

21. Which two features are applied to either incoming or outgoing mail policies? (Choose two.)

22. Which of the following two statements are correct about the large file attachments (greater than 25MB) feature in Cisco Secure Email Encryption Service? (Choose two.)

A. Large file attachments can only be sent using the websafe portal

B. This feature allows users to send up to 50MB of attachments in a secure email.

C. Large file attachments will be sent as a securedoc attachment

D. Large file attachments can only be sent using the Cisco Secure Email Add-In.

E. This feature can only be enabled if the Read from Message feature is enabled

23. When a network engineer is troubleshooting a mail flow issue, they discover that some emails are rejected with an SMTP code of 451 and the error message "#4.7.1 Unable to perform DMARC verification".

In the DMARC verification profile on the Cisco Secure Email Gateway appliance, which action must be set for messages that result in temporary failure to prevent these emails from being rejected?

24. 1.Which SMTP extension does Cisco ESA support for email security?

25. What is a benefit of deploying Cisco Secure Email and Web Manager?

26. An administrator notices that incoming emails with certain attachments do not get delivered to all recipients when the emails have multiple recipients in different domains like cisco.com and test.com. The same emails when sent only to recipients in cisco.com are delivered properly.

How must the Cisco Secure Email Gateway be configured to avoid this behavior?

27. Which two actions are configured on the Cisco ESA to query LDAP servers? (Choose two.)

28. A company has deployed a new mandate that requires all emails sent externally from the Sales Department to be scanned by DLP for PCI-DSS compliance. A new DLP policy has been created on the Cisco ESA and needs to be assigned to a mail policy named ‘Sales’ that has yet to be created.

Which mail policy should be created to accomplish this task?

29. What are two phases of the Cisco ESA email pipeline? (Choose two.)

30. What is the purpose of checking the CRL during SMTP authentication on a Cisco Secure Email Gateway?

31. When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?

32. What is a category for classifying graymail?

A. Malicious

B. Marketing

C. Spam

D. Priority

33. Refer to the exhibit.













Which configuration on the scan behavior must be updated to allow the attachment to be scanned on the Cisco ESA?

34. Which action on the Cisco ESA provides direct access to view the safelist/blocklist?

35. An engineer wants to utilize a digital signature in outgoing emails to validate to others that the email they are receiving was indeed sent and authorized by the owner of that domain.

Which two components should be configured on the Cisco Secure Email Gateway appliance to achieve this? (Choose two.)

A. DMARC verification profile

B. SPF record

C. Public/Private keypair

D. Domain signing profile

E. PKI certificate

36. Which content filter condition checks to see if the "From: header" in the message is similar to any of the users in the content dictionary?

37. An email containing a URL passes through the Cisco ESA that has content filtering disabled for all mail policies. The sender is [email protected], the recipients are [email protected], [email protected], [email protected], and [email protected]. The subject of the email is Test Document395898847. An administrator wants to add a policy to ensure that the Cisco ESA evaluates the web reputation score before permitting this email.

Which two criteria must be used by the administrator to achieve this? (Choose two.)

38. An organization has a strict policy on URLs embedded in emails. The policy allows visibility into what the URL is but does not allow the user to click it.

Which action must be taken to meet the requirements of the security policy?

39. When email authentication is configured on Cisco ESA, which two key types should be selected on the signing profile? (Choose two.)

40. Refer to the exhibit.









Which configuration allows the Cisco Secure Email Gateway to scan for executables inside the archive file and apply the action as per the content filter?

41. DRAG DROP

Drag and drop authentication options for End-User Quarantine Access from the left onto the corresponding configuration steps on the right.

42. What are two primary components of content filters? (Choose two.)

43. What is the default behavior of any listener for TLS communication?

44. Which global setting is configured under Cisco ESA Scan Behavior?

45. DRAG DROP

Drag and drop the graymail descriptions from the left onto the verdict categories they belong to on the right.