300-720 practice questions 91–100

1. Question 91 · 149 in bank

   

   Refer to the exhibit. Which SPF record is valid for mycompany.com?

   • Av=spf1 a mx ip4:199.209.31.2 -all
   • Bv=spf1 a mx ip4:10.1.10.23 -all
   • Cv=spf1 a mx ip4:199.209.31.21 -all
   • Dv=spf1 a mx ip4:172.16.18.230 -all

   Show answer

   Answer: C

   Next question

2. Question 92 · 149 in bank

   What is a valid content filter action?

   • Adecrypt on delivery
   • Bquarantine
   • Cskip antispam
   • Darchive

   Show answer

   Answer: B

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/ b_ESA_Admin_Guide_chapter_01010.html#con_1158022

   References

   • Cisco documentation

   Next question

3. Question 93 · 149 in bank

   Select 2

   When virtual gateways are configured, which two distinct attributes are allocated to each virtual gateway address? (Choose two.)

   • Adomain
   • BIP address
   • CDNS server address
   • DDHCP server address
   • Eexternal spam quarantine

   Show answer

   Answer: AB

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118542-qa-esa-00.html

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

4. Question 94 · 149 in bank

   When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

   • A30 seconds
   • B90 seconds
   • C60 seconds
   • D120 seconds

   Show answer

   Answer: C

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

5. Question 95 · 149 in bank

   Which global setting is configured under Cisco ESA Scan Behavior?

   • Aminimum attachment size to scan
   • Battachment scanning timeout
   • Cactions for unscannable messages due to attachment type
   • Dminimum depth of attachment recursion to scan

   Show answer

   Answer: B

   Explanation

   Reference: https://community.cisco.com/t5/email-security/cisco-ironport-esa-security-services-scan-behavior-impact-on-av/td-p/3923243

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

6. Question 96 · 149 in bank

   Which action on the Cisco ESA provides direct access to view the safelist/blocklist?

   • AShow the SLBL cache on the CLI.
   • BMonitor Incoming/Outgoing Listener.
   • CExport the SLBL to a .csv file.
   • DDebug the mail flow policy.

   Show answer

   Answer: C

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117922-technote-esa-00.html

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

7. Question 97 · 149 in bank

   Which scenario prevents a message from being sent to the quarantine as an action in the scan behavior on Cisco ESA?

   • AA policy quarantine is missing.
   • BMore than one email pipeline is defined.
   • CThe "modify the message subject" is already set.
   • DThe "add custom header" action is performed first.

   Show answer

   Answer: A

   Explanation

   A is Correct. Sending Message to Policy Quarantine: When flagged for quarantine, the message that is not scanned by the Content Scanner continues through the rest of the email pipeline. When the message reaches the end of the pipeline, if the message has been flagged for one or more quarantines then it enters those queues. Note that if the message does not reach the end of the pipeline, it is not placed in a quarantine. For example, a content filter can cause a message to be dropped or bounced, in which case the message will not be quarantined. Note: If a policy quarantine is not defined in your appliance , you cannot sent the message to the quarantine. https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01000.html?bookSearch=true#con_1371434

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

8. Question 98 · 149 in bank

   Select 2

   What are two phases of the Cisco ESA email pipeline? (Choose two.)

   • Areject
   • Bworkqueue
   • Caction
   • Ddelivery
   • Equarantine

   Show answer

   Answer: BD

   Explanation

   Correct. The Email Pipeline is the flow of email as it is processed by the appliance . It has three phases: • Receipt — Asthe appliance connectsto a remote host to receive incoming email, it adheresto configured limits and other receipt policies. For example, verifying that the host can send your users mail, enforcing incoming connection and message limits, and validating the message’s recipient. • Work Queue — The appliance processes incoming and outgoing mail, performing tasks such as filtering, safelist/blocklist scanning, anti-spam and anti-virus scanning, Outbreak Filters, and quarantining. • Delivery — As the appliance connects to send outgoing email, it adheres to configured delivery limits and policies.For example, enforcing outbound connection limits and processing undeliverable messages as specified https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-1/user_guide/b_ESA_Admin_Guide_12_1/b_ESA_Admin_Guide_12_1_chapter_011.pdf

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

9. Question 99 · 149 in bank

   Select 2

   What are two primary components of content filters? (Choose two.)

   • Aconditions
   • Bsubject
   • Ccontent
   • Dactions
   • Epolicies

   Show answer

   Answer: AD

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/b_ESA_Admin_Guide_ces_11_1/b_ESA_Admin_Guide_chapter_01010.pdf

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

10. Question 100 · 149 in bank

    What is a benefit of enabling external SPAM quarantine on Cisco SMA?

    • AIt provides access to the SPAM quarantine interface on which a user can release, duplicate, or delete.
    • BIt provides the ability to scan messages by using two engines to increase a catch rate.
    • CIt provides the ability to consolidate SPAM quarantine data from multiple Cisco ESAs to one central console.
    • DIt provides the ability to back up SPAM quarantine from multiple Cisco ESAs to one central console.

    Show answer

    Answer: C

    Explanation

    Correct. The Security Management appliance includes the following features: External spam quarantine. Holds spam and suspected spam messages for end users, and allow end users and administrators to review messages that are flagged as spam before making a final determination. Centralized policy, virus, and outbreak quarantines. Provide a single location behind the firewall to store and manage messages quarantined by anti-virus scanning, outbreak filters, and policies. Centralized reporting. Run reports on aggregated data from multiple Email Security appliances. Centralized tracking. Track email messages that traverse multiple Email Security appliances. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_0101010.html?bookSearch=true

    Source: Adapted from community discussion — GVKD

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-720 practice, question 91. 149 questions available.