Securing Email with Cisco Email Security Appliance (SESA)149 questions across 15 pages are complete and free, with no account or card.
149 questions in this bank
Free access · progress saved on this device
Which SMTP extension does Cisco ESA support for email security?
Answer: D
Correct. AsyncOS supports the STARTTLS extension to SMTP (Secure SMTP over TLS), described in RFC 3207 (which obsoletes RFC 2487). https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_011000.html?bookSearch=true
Source: Adapted from community discussion — GVKD
Which antispam feature is utilized to give end users control to allow emails that are spam to be delivered to their inbox, overriding any spam verdict and action on the Cisco ESA?
Answer: D
Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/b_ESA_Admin_Guide_ces_11_1/ b_ESA_Admin_Guide_chapter_011111.pdf
A network administrator enabled McAfee antivirus scanning on a Cisco ESA and configured the virus scanning action of “scan for viruses only.” If the scanner finds a virus in an attachment for an incoming email, what action will be applied to this message?
Answer: D
Correct. In a “Scan for Viruses only” environment, these actions “clean” messages by dropping the bad message parts or deliver (this action won't normally be taken). https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01011.html?bookSearch=true
Source: Adapted from community discussion — GVKD
Refer to the exhibit. For improved security, an administrator wants to warn users about opening any links or attachments within an email. How must the administrator configure an HTML-coded message at the top of an email body to create this warning?
Answer: B
Correct. You can create some text resources with both HTML-based and plain text messages, such as Disclaimers. When you add or edit an HTML-based text resource, the GUI includes a rich text edit that allows you to enter rich text without having to manually write HTML code. You can switch between the rich text editor and HTML code by clicking the Code View button. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_010110.html?bookSearch=true
Source: Adapted from community discussion — GVKD
An engineer is tasked with creating a content filter to catch attachments, including credit card numbers, and hold them for review until further action is taken. Which component on a Cisco ESA must be configured to meet this requirement?
Answer: D
A list of company executives is routinely being spoofed, which puts the company at risk of malicious email attacks. An administrator must ensure that executive messages are originating from legitimate sending addresses. Which two steps must be taken to accomplish this task? (Choose two.)
Answer: BE
B and E are Correct. Setting Up Forged Email Detection 1) Identify the users in your organization (for example, executives) whose messages are likely to be forged. Create a new content dictionary and add the names of the identified users to it. 2) Create an incoming content or message filter to detect forged messages and the actions that the appliance must take on such messages. Use the following: -Condition/Rule: Forged Email Detection https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_010101.html#con_1260492
Source: Adapted from community discussion — GVKD
Refer to the exhibit. Which configuration allows the Cisco ESA to scan for executables inside the zip and apply the action as per the content filter?
Answer: B
B is Correct. Content Filters are processed after Outbreak Filters and CASE, this means the relevant error to this question is: "Scan Depth Exceeded". Therefore, teh correct answer is B "Configure the recursive depth to a higher value."
Source: Adapted from community discussion — GVKD
A network engineer is implementing a virus outbreak filter on a Cisco ESA by using the Outbreak Filters feature with plans to perform an additional scan by using a content filter. Which action must be taken by the Outbreak Filters?
Answer: C
C is correct answer If you want to perform a content filter-based scan on the Outbreak Filter processed messages, you must configure the Outbreak Filter to send the processed messages back to an appliance. This is because, in the processing pipeline, the Outbreak Filter scan is performed after the content filter scan. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01110.html?bookSearch=true#con_1138405
Source: Adapted from community discussion — HazemBadr
An organization wants to prevent proprietary patent documents from being shared externally via email. The network administrator reviewed the DLP policies on the Cisco ESA and could not find an existing policy with the appropriate matching patterns. Which type of DLP policy template must be used to create a policy that meets this requirement?
Answer: C
D - Custom policy To create a DLP policy that specifically targets preventing the sharing of proprietary patent documents via email, the network administrator should use a custom policy template. A custom policy allows for the creation of tailored DLP rules and matching patterns based on the organization's specific requirements and data protection needs. While regulatory compliance, acceptable use, and privacy protection policy templates may provide some predefined rules and patterns, they may not directly address the specific requirement of preventing the external sharing of proprietary patent documents. Therefore, a custom policy template would be the most suitable option as it provides flexibility in designing and implementing DLP rules specifically for the organization's unique data protection objectives.
Source: Adapted from community discussion — hakimbenda
An administrator notices that incoming emails with certain attachments do not get delivered to all recipients when the emails have multiple recipients in different domains like cisco.com and test.com. The same emails when sent only to recipients in cisco.com are delivered properly. How must the Cisco ESA be configured to avoid this behavior?
Answer: C
C is Correct. By modifying the mail policies, specifically the recipient matching criteria, you can ensure that email recipients do not match multiple policies simultaneously. When recipients in the email message belong to different domains (e.g., cisco.com and test.com), it can result in multiple policies being triggered simultaneously, leading to inconsistent delivery of emails with attachments. DLP is for outgoing mail only and not relevant to incoming mail.
Source: Adapted from community discussion — GVKD
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-720 practice, question 1. 149 questions available.
Version 1.0.0. How we source questions