300-720 practice questions 51–60

1. Question 51 · 149 in bank

   An analyst creates a new content dictionary to use with Forged Email Detection. Which entry will be added into the dictionary?

   • Amycompany.com
   • BAlpha Beta
   • C^Alpha\ Beta$
   • DAlpha.Beta@mycompany.com

   Show answer

   Answer: B

   Explanation

   Reference: https://www.cisco.com/c/en/us/products/collateral/security/email-security-appliance/whitepaper_C11-737596.html

   Source: Adapted from community discussion — jolenzi

   References

   • Cisco documentation

   Next question

2. Question 52 · 149 in bank

   Which process is skipped when an email is received from safedomain.com, which is on the safelist?

   • Amessage filter
   • Bantivirus scanning
   • Coutbreak filter
   • Dantispam scanning

   Show answer

   Answer: D

   Explanation

   D is the correct answer https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/b_ESA_Admin_Guide_ces_11_1/b_ESA_Admin_Guide_chapter_011111.pdf For example, a message is sent to both recipient A and recipient B. Recipient A has safelisted the sender, whereas recipient B does not have an entry for the sender in the safelist or the blocklist. In this case, the message may be split into two messages with two message IDs. The message sent to recipient A is marked assafelisted with an X-SLBL-Result-Safelist header and skips anti-spam scanning, whereas the message bound for recipient B is scanned by the anti-spam scanning engine. Both messages then continue along the pipeline (through anti-virus scanning, content policies, and so on) and are subject to any configured settings.

   Source: Adapted from community discussion — wernervv32

   References

   • Cisco documentation
   • Cisco documentation

   Next question

3. Question 53 · 149 in bank

   Select 2

   Which two query types are available when an LDAP profile is configured? (Choose two.)

   • Aproxy consolidation
   • Buser
   • Crecursive
   • Dgroup
   • Erouting

   Show answer

   Answer: DE

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/ b_ESA_Admin_Guide_12_0_chapter_011010.html

   References

   • Cisco documentation

   Next question

4. Question 54 · 149 in bank

   Which feature utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco ESA?

   • ASenderBase Reputation Filtering
   • BConnection Reputation Filtering
   • CTalos Reputation Filtering
   • DSpamCop Reputation Filtering

   Show answer

   Answer: A

   Explanation

   Correct. SenderBase Reputation Service The Cisco SenderBase Reputation Service, using global data from the SenderBase Affiliate network, assigns a SenderBase Reputation Score to email senders https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_0101.html?bookSearch=true

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

5. Question 55 · 149 in bank

   Which action is a valid fallback when a client certificate is unavailable during SMTP authentication on Cisco ESA?

   • ALDAP Query
   • BSMTP AUTH
   • CSMTP TLS
   • DLDAP BIND

   Show answer

   Answer: B

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/ b_ESA_Admin_Guide_12_0_chapter_011011.html

   References

   • Cisco documentation

   Next question

6. Question 56 · 149 in bank

   Email encryption is configured on a Cisco ESA that uses CRES. Which action is taken on a message when CRES is unavailable?

   • AIt is requeued.
   • BIt is sent in clear text.
   • CIt is dropped and an error message is sent to the sender.
   • DIt is encrypted by a Cisco encryption appliance.

   Show answer

   Answer: A

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117863-configure-esa-00.html

   Source: Adapted from community discussion — jolenzi

   References

   • Cisco documentation
   • Cisco documentation

   Next question

7. Question 57 · 149 in bank

   Select 2

   Which two features of Cisco Email Security are added to a Sender Group to protect an organization against email threats? (Choose two.)

   • ANetFlow
   • Bgeolocation-based filtering
   • Cheuristic-based filtering
   • Dsenderbase reputation filtering
   • Econtent disarm and reconstruction

   Show answer

   Answer: BD

   References

   • Cisco documentation

   Next question

8. Question 58 · 149 in bank

   Select 2

   Which two steps configure Forged Email Detection? (Choose two.)

   • AConfigure a content dictionary with executive email addresses.
   • BConfigure a filter to use the Forged Email Detection rule and dictionary.
   • CConfigure a filter to check the Header From value against the Forged Email Detection dictionary.
   • DEnable Forged Email Detection on the Security Services page.
   • EConfigure a content dictionary with friendly names.

   Show answer

   Answer: BE

   Explanation

   Just to clarify, in the forged email detection dictionary, we use names of executives and not email addresses correct? for example John Smith , and not JohnSmith@mycompany.com

   Source: Adapted from community discussion — iluxa

   Next question

9. Question 59 · 149 in bank

   What is the default behavior of any listener for TLS communication?

   • Apreferred-verify
   • Boff
   • Cpreferred
   • Drequired

   Show answer

   Answer: B

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118954-config-esa-00.html

   Next question

10. Question 60 · 149 in bank

    DRAG DROP - Drag and drop the Cisco ESA reactions to a possible DLP from the left onto the correct action types on the right. Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010001.html (message actions)

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-720 practice, question 51. 149 questions available.