Securing Email with Cisco Email Security Appliance (SESA)149 questions across 15 pages are complete and free, with no account or card.
149 questions in this bank
Free access · progress saved on this device
DRAG DROP - Drag and drop the graymail descriptions from the left onto the verdict categories they belong to on the right.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Which feature must be activated on a Cisco ESA to combat backscatter?
Answer: D
D is Correct. Enabling Bounce Verification is a very good way to combat backscatter/bounce attacks. The concept behind bounce verification is simple. First, mark up messages leaving your ESA. Look for that markup on any bounce messages, if the markup is present, it means that this is a bounce of a message that originated in your environment. If the markup is missing, the bounce is fraudulent and can be rejected or dropped. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_011001.html?bookSearch=true#con_1134690
Source: Adapted from community discussion — GVKD
Refer to the exhibit. An administrator has configured File Reputation and File Analysis on the Cisco ESA; however, is does not function as expected. What must be configured on the Cisco ESA for this to function?
Answer: D
I think it is answer D, in the example the ssl checkbox is not marked yet, and it shows that the esa is able to telnet on port 443 so port must be open.
Source: Adapted from community discussion — Gray44
What must be considered when viewing spam messages addressed to an email alias on Cisco ESA?
Answer: D
D is Correct. Authentication Options for End Users Accessing Spam Management Features Note Mailbox authentication does not allow users to view messages addressed to an email alias. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_011111.html?bookSearch=true
Source: Adapted from community discussion — GVKD
Spammers routinely try to send emails with the recipient field filled with a list of all possible combinations of letters and numbers. These combinations, appended with a company’s domain name are malicious attempts at learning all possible valid email addresses. Which action must be taken on a Cisco ESA to prevent this from occurring?
Answer: C
Correct. Directory Harvest Attack Prevention within the SMTP Conversation: You can prevent DHAs by entering only domains in the Recipient Access Table (RAT), and performing the LDAP acceptance validation in the SMTP conversation. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_011010.html?bookSearch=true
Source: Adapted from community discussion — GVKD
An organization has a strict policy on URLs embedded in emails. The policy allows visibility into what the URL is but does not allow the user to click it. Which action must be taken to meet the requirements of the security policy?
Answer: A
A is Correct. Defang a URL so that it is unclickable. Message recipients can still see and copy the URL. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01111.html?bookSearch=true
Source: Adapted from community discussion — GVKD
What is a category for classifying graymail?
Answer: B
Correct. Graymail Classification The graymail engine classifies each graymail into one of the following categories: • Marketing Email. Advertising messages sent by professional marketing groups, for example, bulletins from Amazon.com with details about their newly launched products. • Social Network Email. Notification messages from social networks, dating websites, forums, and so on. Examples include alerts from: ◦LinkedIn, for jobs that you may be interested in ◦CNET forums, when a user responds to your post. • Bulk Email. Advertising messages sent by unrecognized marketing groups, for example, newsletters from TechTarget, a technology media company. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-0/user_guide/b_ESA_Admin_Guide/b_ESA_Admin_Guide_chapter_01101.pdf
Source: Adapted from community discussion — GVKD
A network engineer must tighten up the SPAM control policy of an organization due to a recent SPAM attack. In which scenario does enabling regional scanning improve security for this organization?
Answer: B
B is Correct. Enable or disable regional scanning and if applicable, select a region. Enable this feature only if you receive the bulk of your email from the specified region. Because this feature optimizes the anti-spam engine for a particular region, it can reduce capture rates for other types of spam. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01100.html?bookSearch=true
Source: Adapted from community discussion — GVKD
Refer to the exhibit. An engineer needs to change the existing Forged Email Detection message filter so that it references a newly created dictionary named ‘Executives’. What should be done to accomplish this task?
Answer: D
An administrator has created a content filter to quarantine all messages that result in an SPF hardfail to review the messages and determine whether a trusted partner has accidentally misconfigured the DNS settings. The administrator sets the policy quarantine to release the messages after 24 hours, allowing time to review while not interrupting business. Which additional option should be used to help the end users be aware of the elevated risk of interacting with these messages?
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-720 practice, question 121. 149 questions available.
Version 1.0.0. How we source questions