300-720 practice questions 71–80

1. Question 71 · 149 in bank

   Which type of attack is prevented by configuring file reputation filtering and file analysis features?

   • Adenial of service
   • Bzero-day
   • Cbackscatter
   • Dphishing

   Show answer

   Answer: B

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/ b_ESA_Admin_Guide_chapter_010000.html#con_1809885

   Next question

2. Question 72 · 149 in bank

   When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?

   • AAAAA record
   • BPTR record
   • CTXT record
   • DMX record

   Show answer

   Answer: C

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213939-esa-configure-dkim-signing.html

   Next question

3. Question 73 · 149 in bank

   Which attack is mitigated by using Bounce Verification?

   • Aspoof
   • Bdenial of service
   • Ceavesdropping
   • Dsmurf

   Show answer

   Answer: B

   Explanation

   Reference: https://www.networkworld.com/article/2305394/ironport-adds-bounce-back-verification-for-e-mail.html

   Next question

4. Question 74 · 149 in bank

   Select 2

   When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)

   • Aredirect
   • Breturn
   • Cdrop
   • Ddelay
   • Eabandon

   Show answer

   Answer: AD

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01110.html

   References

   • Cisco documentation

   Next question

5. Question 75 · 149 in bank

   Select 2

   Which two features are applied to either incoming or outgoing mail policies? (Choose two.)

   • AIndication of Compromise
   • Bapplication filtering
   • Coutbreak filters
   • Dsender reputation filtering
   • Eantivirus

   Show answer

   Answer: CE

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html

   Source: Adapted from community discussion — GVKD

   Next question

6. Question 76 · 149 in bank

   Which benefit does enabling external spam quarantine on Cisco SMA provide?

   • Aability to back up spam quarantine from multiple Cisco ESAs to one central console
   • Baccess to the spam quarantine interface on which a user can release, duplicate, or delete
   • Cability to scan messages by using two engines to increase a catch rate
   • Dability to consolidate spam quarantine data from multiple Cisco ESA to one central console

   Show answer

   Answer: D

   Explanation

   Correct. Centralized Policy, Virus, and Outbreak Quarantines You can centralize policy, virus, and outbreak quarantines on a Security Management appliance. Messages are processed by Email Security appliances but are stored in quarantines on the Security Management appliance. Centralizing policy, virus, and outbreak quarantines offers the following benefits: Administrators can manage quarantined messages from multiple Email Security appliances in one location. Quarantined messages are stored behind the firewall instead of in the DMZ, reducing security risk. Centralized quarantines can be backed up using the standard backup functionality on the Security Management appliance. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_0101010.html?bookSearch=true#con_1154400

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

7. Question 77 · 149 in bank

   What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?

   • Aprovisioned email encryption profile
   • Bmessage encryption from a content filter that select "Message Encryption" over TLS
   • Cmessage encryption from the mail flow policies with "CRES" selected
   • Dcontent filter to forward the email to the Cisco Registered Envelope server

   Show answer

   Answer: A

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010010.html

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation
   • Cisco documentation

   Next question

8. Question 78 · 149 in bank

   Select 2

   Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)

   • Aload balancing
   • BSLA monitor
   • Cactive-standby
   • Dfailover
   • Eactive-active

   Show answer

   Answer: AD

   Explanation

   You can enter multiple host names to configure the LDAP servers for failover or load-balancing. Separate multiple entries with commas. Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/sma_user_guide/b_SMA_Admin_Guide_ces_11/ b_SMA_Admin_Guide_chapter_01010.html

   Source: Adapted from community discussion — GVKD

   References

   • Cisco documentation

   Next question

9. Question 79 · 149 in bank

   What is the default port to deliver emails from the Cisco ESA to the Cisco SMA using the centralized Spam Quarantine?

   • A8025
   • B6443
   • C6025
   • D8443

   Show answer

   Answer: C

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure-esa-00.html

   References

   • Cisco documentation

   Next question

10. Question 80 · 149 in bank

    DRAG DROP - Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right. Select and Place:

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    Explanation

    Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_010101.html

    Source: Adapted from community discussion — GVKD

    References

    • Cisco documentation

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-720 practice, question 71. 149 questions available.