Cisco 300-720 Exam Info and Free Practice Test | Free4Torrent
Pass Cisco 300-720 Premium Files Test Engine pdf - Free Dumps Collection
Cisco 300-720 exam aims to test the candidate's knowledge of various email security technologies, including email filtering, email encryption, and email authentication. 300-720 exam also covers topics such as email security solutions, email threats, and various email security policies. 300-720 exam is suitable for IT professionals, security consultants, and network administrators who are responsible for managing email security in their organization.
Earning the Cisco 300-720 certification is an excellent way for IT professionals to enhance their skills and knowledge in the area of email security. Securing Email with Cisco Email Security Appliance certification is recognized globally and demonstrates the candidate's proficiency in securing email using Cisco ESA. With this certification, individuals can advance their careers and showcase their expertise in implementing and managing email security solutions using Cisco technologies.
NEW QUESTION # 40
Refer to the exhibit.
Which SPF record is valid for mycompany.com?
- A. v=spf1 a mx ip4:172.16.18.230 -all
- B. v=spf1 a mx ip4:199.209.31.21 -all
- C. v=spf1 a mx ip4:199.209.31.2 -all
- D. v=spf1 a mx ip4:10.1.10.23 -all
Answer: A
NEW QUESTION # 41
An engineer is tasked with reviewing mail logs to confirm that messages sent from domain abc.com are passing SPF verification and being accepted by the Cisco ESA. The engineer notices that SPF verification is not being performed and that SPF is not being referenced in the logs for messages sent from domain abc.com.
Why is the verification not working properly?
- A. SPF verification is disabled in the Recipient Access Table.
- B. An SPF verification Content Filter has not been created.
- C. SPF verification is disabled on the Mail Flow Policy.
- D. The SPF conformance level is set to SIDF compatible on the Mail Flow Policy.
Answer: B
NEW QUESTION # 42
A Cisco ESA administrator has several mail policies configured. While testing policy match using a specific sender, the email was not matching the expected policy.
What is the reason of this?
- A. The Tram* header is checked against all policies in a top-down fashion.
- B. The To" header is checked against all policies in a top-down fashion.
- C. The message header with the highest priority is checked against the Default policy in a top-down fashion.
- D. The message header with the highest priority is checked against each policy in a top-down fashion.
Answer: D
Explanation:
The envelope sender and the envelope recipeint have a higher priority over the sender header when you match a message to a mail policy. If you configure a mail policy to match a specific user, the messages are automatically classified into the mail policy based on the envelope sender and the envelope recipient. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html
NEW QUESTION # 43
Which attack is mitigated by using Bounce Verification?
- A. denial of service
- B. smurf
- C. eavesdropping
- D. spoof
Answer: A
Explanation:
Bounce Verification is a feature that mitigates denial of service attacks on Cisco ESA. A denial of service attack is an attempt to overwhelm a system or network with excessive traffic or requests, rendering it unavailable or slow for legitimate users. Bounce Verification prevents Cisco ESA from accepting bounce messages that are not generated by itself or by trusted hosts, reducing the load on the system and preventing backscatter spam.
NEW QUESTION # 44
Which two features are applied to either incoming or outgoing mail policies? (Choose two.)
- A. Indication of Compromise
- B. application filtering
- C. outbreak filters
- D. sender reputation filtering
- E. antivirus
Answer: C,E
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html
NEW QUESTION # 45
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?
- A. Apply a filter on the message.
- B. Issue the altsrchost command.
- C. Set up the interface group with the flag.
- D. Map the envelope sender address to the host.
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html#con_1133810
NEW QUESTION # 46
Which two features of Cisco Email Security are added to a Sender Group to protect an organization against email threats? (Choose two.)
- A. heuristic-based filtering
- B. senderbase reputation filtering
- C. NetFlow
- D. geolocation-based filtering
- E. content disarm and reconstruction
Answer: A,B
NEW QUESTION # 47
Which two steps configure Forged Email Detection? (Choose two.)
- A. Configure a filter to use the Forged Email Detection rule and dictionary.
- B. Configure a content dictionary with executive email addresses.
- C. Configure a filter to check the Header From value against the Forged Email Detection dictionary.
- D. Enable Forged Email Detection on the Security Services page.
- E. Configure a content dictionary with friendly names.
Answer: A,B
Explanation:
Reference:
https://explore.cisco.com/esa-feature-enablement/user-guide-for-async-11
NEW QUESTION # 48 
Refer to the exhibits. What must be done to enforce end user authentication before accessing quarantine?
- A. Change the end user quarantine access setting from None authentication to Mailbox.
- B. Change the end user quarantine access from None authentication to SAAS.
- C. Enable SPAM Quarantine Notification and add the %quarantine_url% variable.
- D. Enable SPAM notification and use LDAP for authentication.
Answer: D
NEW QUESTION # 49
What is a benefit of implementing URL filtering on the Cisco ESA?
- A. provides URL reputation protection
- B. blacklists spam
- C. enhances reputation against malicious URLs
- D. removes threats from malicious URLs
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote- esa-00.html
NEW QUESTION # 50
Which Cisco Secure Email Threat Defense visibility and remediation mode is only available when using Cisco Secure Email Gateway as the message source?
- A. Cisco Security Cloud Sign On
- B. Microsoft 365 Authentication
- C. Basic Authentication
- D. No Authentication
Answer: D
Explanation:
According to the Cisco Secure Email Threat Defense User Guide, the No Authentication option is only available if you are using a Cisco Secure Email Gateway (SEG) as your message source. This option allows visibility only, no remediation1.
The other options are not valid because:
A) Basic Authentication is not a visibility and remediation mode for Cisco Secure Email Threat Defense. It is a method of authenticating users with a username and password2.
C) Microsoft 365 Authentication is a visibility and remediation mode that allows you to use Microsoft 365 credentials to access Cisco Secure Email Threat Defense. It has two sub-options: Read/Write and Read. This mode is available for both Microsoft 365 and Gateway message sources1.
D) Cisco Security Cloud Sign On is not a visibility and remediation mode for Cisco Secure Email Threat Defense. It is a service that manages user authentication for Cisco security products, including Cisco Secure Email Threat Defense3.
NEW QUESTION # 51
Which component must be added to the content filter to trigger on failed SPF Verification or DKIM Authentication verdicts?
- A. condition
- B. status
- C. response
- D. parameter
Answer: A
Explanation:
Condition is a component that must be added to the content filter to trigger on failed SPF Verification or DKIM Authentication verdicts. Condition is a criterion that determines whether a message matches a content filter rule or not, such as message size, sender address, attachment type, etc.
To add a condition to the content filter that triggers on failed SPF Verification or DKIM Authentication verdicts, the administrator can follow these steps:
Select Mail Policies > Content Filters and click Add Filter.
Enter a name and description for the content filter.
Under Conditions, click Add Condition.
Choose SPF Verification or DKIM Authentication from the drop-down menu.
Choose Fail from the drop-down menu.
Click Submit.
The other options are not valid components to trigger on failed SPF Verification or DKIM Authentication verdicts, because they are not part of content filters.
NEW QUESTION # 52
An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level." What is the cause of this error?
- A. DLP is configured at the cluster-level on esa2.
- B. DLP is configured at the domain-level on esa1.
- C. DLP is not configured on host1.
- D. Content filters are configured at the machine-level on esa1.
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118026-technote- esa-00.html
NEW QUESTION # 53
Which two action types are performed by Cisco ESA message filters? (Choose two.)
- A. non-final actions
- B. discard actions
- C. final actions
- D. quarantine actions
- E. filter actions
Answer: A,C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html
NEW QUESTION # 54
Which antispam feature is utilized to give end users control to allow emails that are spam to be delivered to their inbox, overriding any spam verdict and action on the Cisco ESA?
- A. end user allow list
- B. end user safelist
- C. end user spam quarantine access
- D. end user passthrough list
Answer: B
Explanation:
End user safelist is a feature that allows end users to specify email addresses or domains that they want to receive messages from, regardless of the spam verdict or action assigned by Cisco ESA. Messages from senders on the end user safelist are delivered to the end user's inbox without any spam filtering.
NEW QUESTION # 55
Which two are configured in the DMARC verification profile? (Choose two.)
- A. message action into an incoming or outgoing content filter
- B. name of the verification profile
- C. minimum number of signatures to verify
- D. message action to take when the policy is reject/quarantine
- E. ESA listeners to use the verification profile
Answer: B,D
NEW QUESTION # 56
When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)
- A. redirect
- B. return
- C. abandon
- D. delay
- E. drop
Answer: A,D
NEW QUESTION # 57
Users have been complaining of a higher volume of emails containing profanity. The network administrator will need to leverage dictionaries and create specific conditions to reduce the number of inappropriate emails.
Which two filters should be configured to address this? (Choose two.)
- A. spam
- B. content
- C. VOF
- D. message
- E. sender group
Answer: B,D
Explanation:
Message filter and content filter are two filters that should be configured to address this issue. Message filter and content filter are rules that allow Cisco ESA to perform actions on messages based on predefined or custom conditions, such as headers, envelope, body, attachments, etc.
To reduce the number of inappropriate emails containing profanity, the network administrator can create a dictionary that contains a list of profane words or phrases and use it as a condition in a message filter or content filter that applies an action of "drop", "quarantine", or "modify subject" on the matching messages.
The other options are not valid filters to address this issue, because they do not use dictionaries or conditions based on message content.
NEW QUESTION # 58
When outbreak filters are configured, which two actions are used to protect users from outbreaks?
(Choose two.)
- A. redirect
- B. return
- C. abandon
- D. delay
- E. drop
Answer: A,D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01110.html
NEW QUESTION # 59
What is the default behavior of any listener for TLS communication?
- A. preferred
- B. off
- C. required
- D. preferred-verify
Answer: B
Explanation:
The default behavior of any listener for TLS communication is B. off. This means that TLS is not allowed for incoming connections to the listener and connections to the listener do not require encrypted Simple Mail Transfer Protocol (SMTP) conversations. This is stated in the web search result 1. To enable TLS for a listener, you need to configure the Use TLS option in the mail flow policy settings for the listener on the Mail Policies > HAT Overview page1. You can choose from three different settings for TLS: No, Preferred, or Required1.
NEW QUESTION # 60
When URL logging is configured on a Cisco ESA, which feature must be enabled first?
- A. senderbase reputation filter
- B. virus outbreak filter
- C. antivirus
- D. antispam
Answer: B
NEW QUESTION # 61
......
Updated Official licence for 300-720 Certified by 300-720 Dumps PDF: https://validdumps.free4torrent.com/300-720-valid-dumps-torrent.html