Securing Email with Cisco Email Security Appliance (SESA)149 questions across 15 pages are complete and free, with no account or card.
149 questions in this bank
Free access · progress saved on this device
DRAG DROP - Drag and drop the SMTP Call-Ahead Server Profile Settings from the left onto the descriptions on the right.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
An engineer is reviewing the SMTP routing table on a Cisco ESA using the smtproutes CLI command and discovers an IPv6 route for 2620:104:4360:9232::23. What type of IPv6 route does this represent?
Answer: C
Can you please elaborate on your answer? I believe a Prefix contains a "/". Prefix 2620:0104:4360:9232:0000:0000:0000:0000/64 Address 2620:0104:4360:9232:0000:0000:0000:0023 Address Range Start 2620:0104:4360:9232:0000:0000:0000:0000 Address Range End 2620:0104:4360:9232:ffff:ffff:ffff:ffff
Source: Adapted from community discussion — GVKD
An engineer must limit responses from the gateway that are directed to invalid email addresses. How should the LDAP server be configured to accomplish this goal?
Answer: C
C is Correct. In the mail flow policy associated with the listener, configure the following Directory Harvest Attack Prevention setting: -Max. Invalid Recipients Per hour. -Drop Connection if DHAP Threshold is reached within an SMTP conversation. -Max. Recipients Per Hour Code. -Max. Recipients Per Hour Text. https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0/b_ESA_Admin_Guide_12_1_chapter_011011.html?bookSearch=true#con_1163450
Source: Adapted from community discussion — GVKD
DRAG DROP - Drag and drop the steps to configure Cisco ESA to use SPF/SIDF verification from the left into the correct order on the right. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Which component must be added to the content filter to trigger on failed SPF Verification or DKIM Authentication verdicts?
Answer: D
An organization wants to use DMARC to improve its brand reputation by leveraging DNS records. Which two email authentication mechanisms are utilized during this process? (Choose two.)
Answer: AC
An engineer is tasked with reviewing mail logs to confirm that messages sent from domain abc.com are passing SPF verification and being accepted by the Cisco ESA. The engineer notices that SPF verification is not being performed and that SPF is not being referenced in the logs for messages sent from domain abc.com. Why is the verification not working properly?
Answer: B
B is Correct. Enabling SPF and SIDF: To use SPF/SIDF, you must enable SPF/SIDF for a mail flow policy on an incoming listener. You can enable SPF/SIDF on the listener from the default mail flow policy, or you can enable it for particular incoming mail flow policies. https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0/b_ESA_Admin_Guide_12_1_chapter_010110.html?bookSearch=true#task_1147982
Source: Adapted from community discussion — GVKD
An administrator needs to configure Cisco ESA to ensure that emails are sent and authorized by the owner of the domain. Which two steps must be performed to accomplish this task? (Choose two.)
Answer: AB
Going with A and B are Correct. Configuring DomainKeys and DKIM Signing: -Signing Keys -Public Keys -Domain Profiles Creating Domain Profiles: Step 1 -Choose Mail Policies > Signing Profiles. Step 2 -In the Domain Signing Profiles section, click Add Profile. https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0/b_ESA_Admin_Guide_12_1_chapter_010110.html?bookSearch=true
Source: Adapted from community discussion — GVKD
What is the purpose of Cisco Email Encryption on Cisco ESA?
Answer: D
Correct. Overview of Encrypting Communication with Other MTAs: AsyncOS supports the STARTTLS extension to SMTP (Secure SMTP over TLS). The TLS implementation in AsyncOS provides privacy through encryption. https://www.cisco.com/c/en/us/td/docs/security/esa/esa14-0/user_guide/b_ESA_Admin_Guide_14-0/b_ESA_Admin_Guide_12_1_chapter_011001.html?bookSearch=true
Source: Adapted from community discussion — GVKD
A Cisco ESA administrator must provide outbound email authenticity and configures a DKIM signing profile to handle this task. What is the next step to allow this organization to use DKIM for their outbound email?
Answer: B
B is Correct. ESA - Configure DKIM Signing -Create a DKIM signing key -Generate a new DKIM signing profile and publish the DNS record to DNS. https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213939-esa-configure-dkim-signing.pdf
Source: Adapted from community discussion — GVKD
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
300-720 practice, question 21. 149 questions available.
Version 1.0.0. How we source questions
