300-720 practice questions 61–70

1. Question 61 · 149 in bank

   Select 2

   Which two actions are configured on the Cisco ESA to query LDAP servers? (Choose two.)

   • Aaccept
   • Brelay
   • Cdelay
   • Droute
   • Ereject

   Show answer

   Answer: AD

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-0/user_guide_fs/b_ESA_Admin_Guide_11_0/b_ESA_Admin_Guide_chapter_011010.html

   References

   • Cisco documentation

   Next question

2. Question 62 · 149 in bank

   Select 2

   Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)

   • AThe filters command executed from the CLI is used to configure the message filters.
   • BMessage filters configuration within the web user interface is located within Incoming Content Filters.
   • CThe filterconfig command executed from the CLI is used to configure message filters.
   • DMessage filters can be configured only from the CLI.
   • EMessage filters can be configured only from the web user interface.

   Show answer

   Answer: AD

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213940-esa-using-a-message-filter-to-take-act.html

   Next question

3. Question 63 · 149 in bank

   What occurs when configuring separate incoming mail policies?

   • Amessage splintering
   • Bmessage exceptions
   • Cmessage detachment
   • Dmessage aggregation

   Show answer

   Answer: A

   Next question

4. Question 64 · 149 in bank

   Which type of query must be configured when setting up the Spam Quarantine while merging notifications?

   • ASpam Quarantine Alias Routing Query
   • BSpam Quarantine Alias Consolidation Query
   • CSpam Quarantine Alias Authentication Query
   • DSpam Quarantine Alias Masquerading Query

   Show answer

   Answer: B

   Explanation

   Correct. Spam Quarantine Alias Consolidation Queries If you use spam notifications, the spam quarantine alias consolidation query consolidates the email aliases so that recipients do not receive quarantine notices for each alias. https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide/b_ESA_Admin_Guide_ces_11_0/b_ESA_Admin_Guide_chapter_011010.html#con_1164119

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

5. Question 65 · 149 in bank

   When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?

   • AEnabling the End-User Safelist/Blocklist feature
   • BSpam Quarantine External Authentication Query
   • CSpam Quarantine End-User Authentication Query
   • DSpam Quarantine Alias Consolidation Query

   Show answer

   Answer: C

   Explanation

   Correct. Spam Quarantine End-User Authentication. You can configure your appliance to validate users when they log in to the end-user quarantine. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_011010.html?bookSearch=true

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

6. Question 66 · 149 in bank

   Select 2

   Which two factors must be considered when message filter processing is configured? (Choose two.)

   • Amessage-filter order
   • Blateral processing
   • Cstructure of the combined packet
   • Dmail policies
   • EMIME structure of the message

   Show answer

   Answer: AE

   Next question

7. Question 67 · 149 in bank

   How does the graymail safe unsubscribe feature function?

   • AIt strips the malicious content of the URI before unsubscribing.
   • BIt checks the URI reputation and category and allows the content filter to take an action on it.
   • CIt redirects the end user who clicks the unsubscribe button to a sandbox environment to allow a safe unsubscribe.
   • DIt checks the reputation of the URI and performs the unsubscribe process on behalf of the end user.

   Show answer

   Answer: D

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/200383-Graymail-Detection-and-Safe-Unsubscribin.html

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

8. Question 68 · 149 in bank

   Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?

   • ASet up the interface group with the flag.
   • BIssue the altsrchost command.
   • CMap the envelope sender address to the host.
   • DApply a filter on the message.

   Show answer

   Answer: D

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/ b_ESA_Admin_Guide_chapter_01000.html#con_1133810

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation
   • Cisco documentation

   Next question

9. Question 69 · 149 in bank

   An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level." What is the cause of this error?

   • AContent filters are configured at the machine-level on esa1.
   • BDLP is configured at the cluster-level on esa2.
   • CDLP is configured at the domain-level on esa1.
   • DDLP is not configured on host1.

   Show answer

   Answer: D

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118026-technote-esa-00.html

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

10. Question 70 · 149 in bank

    Which feature must be configured before an administrator can use the outbreak filter for nonviral threats?

    • Aquarantine threat level
    • Bantispam
    • Cdata loss prevention
    • Dantivirus

    Show answer

    Answer: B

    Explanation

    Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01110.html

    Source: Adapted from community discussion — jolenzi

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-720 practice, question 61. 149 questions available.