Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)

The filters command executed from the CLI is used to configure the message filters.

Message filters can be configured only from the CLI.

The filters command executed from the CLI is used to configure the message filters.

Message filters configuration within the web user interface is located within Incoming Content Filters.

The filterconfig command executed from the CLI is used to configure message filters.

Message filters can be configured only from the CLI.

Message filters can be configured only from the web user interface.

What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?

provisioned email encryption profile

message encryption from a content filter that select "Message Encryption" over TLS

message encryption from the mail flow policies with "CRES" selected

content filter to forward the email to the Cisco Registered Envelope server

Which two steps are needed to disable local spam quarantine before external quarantine is enabled?(Choose two.)

Uncheck the Enable Spam Quarantine check box.

Select Security Services and click Spam Quarantine.

Uncheck the Enable Spam Quarantine check box.

Select Monitor and click Spam Quarantine.

Check the External Safelist/Blocklist check box.

Select External Spam Quarantine and click on Configure.

Select Security Services and click Spam Quarantine.

Which two components must be configured to perform DLP scanning? (Choose two.)

Add a DLP policy to the DLP Policy Manager.

Enable a DLP policy on the Outgoing Mail Policy.

Add a DLP policy on the Incoming Mail Policy.

Add a DLP policy to the DLP Policy Manager.

Enable a DLP policy on the Outgoing Mail Policy.

Enable a DLP policy on the DLP Policy Customizations.

Add a DLP policy to the Outgoing Content Filter.

Which two are configured in the DMARC verification profile? (Choose two.)

name of the verification profile

message action to take when the policy is reject/quarantine

name of the verification profile

minimum number of signatures to verify

ESA listeners to use the verification profile

message action into an incoming or outgoing content filter

message action to take when the policy is reject/quarantine

Which two components form the graymail management solution in Cisco ESA? (Choose two.)

cloud-based unsubscribe service

integrated graymail scanning engine

cloud-based unsubscribe service

uniform unsubscription management interface for end users

secure subscribe option for end users

integrated graymail scanning engine

What is a benefit of implementing URL filtering on the Cisco ESA?

provides URL reputation protection

removes threats from malicious URLs

provides URL reputation protection

enhances reputation against malicious URLs

Refer to the exhibit. Which SPF record is valid for mycompany.com?

v=spf1 a mx ip4:199.209.31.21 -all

v=spf1 a mx ip4:199.209.31.2 -all

v=spf1 a mx ip4:10.1.10.23 -all

v=spf1 a mx ip4:199.209.31.21 -all

v=spf1 a mx ip4:172.16.18.230 -all

Which global setting is configured under Cisco ESA Scan Behavior?

actions for unscannable messages due to attachment type

minimum attachment size to scan

actions for unscannable messages due to attachment type

minimum depth of attachment recursion to scan

Which action on the Cisco ESA provides direct access to view the safelist/blocklist?

Export the SLBL to a .csv file.

Show the SLBL cache on the CLI.

Monitor Incoming/Outgoing Listener.

Export the SLBL to a .csv file.

Which scenario prevents a message from being sent to the quarantine as an action in the scan behavior on Cisco ESA?

A policy quarantine is missing.

More than one email pipeline is defined.

The "modify the message subject" is already set.

The "add custom header" action is performed first.

An administrator is managing multiple Cisco ESA devices and wants to view the quarantine emails from all devices in a central location.How is this accomplished?

Disable the local quarantine before sending SPAM to the external quarantine.

Disable the VOF feature before sending SPAM to the external quarantine.

Configure a mail policy to determine whether the message is sent to the local or external quarantine.

Disable the local quarantine before sending SPAM to the external quarantine.

Configure a user policy to determine whether the message is sent to the local or external quarantine.

A Cisco ESA administrator has several mail policies configured. While testing policy match using a specific sender, the email was not matching the expected policy.What is the reason of this?

The message header with the highest priority is checked against each policy in a top-down fashion.

The Tram* header is checked against all policies in a top-down fashion.

The message header with the highest priority is checked against each policy in a top-down fashion.

The To" header is checked against all policies in a top-down fashion.

The message header with the highest priority is checked against the Default policy in a top-down fashion.

An engineer is testing mail flow on a new Cisco ESA and notices that messages for domain abc.com are stuck in the delivery queue. Upon further investigation, the engineer notices that the messages pending delivery are destined for 192.168.1.11, when they should instead be routed to 192.168.1.10.What configuration change needed to address this issue?

Modify the SMTP route for the domain and change the IP address to 192.168.1.10.

Add an address list for domain abc.com.

Modify Destination Controls entry for the domain abc.com.

Modify the SMTP route for the domain and change the IP address to 192.168.1.10.

Modify the Routing Tables and add a route for IP address to 192.168.1.10.

Refer to the exhibit. How should this configuration be modified to stop delivering Zero Day malware attacks?

Change File Analysis Pending action from Deliver As Is to Quarantine.

Change Unscannable Action from Deliver As Is to Quarantine.

Change File Analysis Pending action from Deliver As Is to Quarantine.

Configure mailbox auto-remediation.

Apply Prepend on Modify Message Subject under Malware Attachments.

Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?

Set up the interface group with the flag.

Map the envelope sender address to the host.

A Cisco ESA administrator was notified that a user was not receiving emails from a specific domain.After reviewing the mail logs, the sender had a negative sender-based reputation score.What should the administrator do to allow inbound email from that specific domain?

Add the domain into the allow list.

Create a new inbound mail policy with a message filter that overrides Talos.

Ask the user to add the sender to the email application's allow list.

Modify the firewall to allow emails from the domain.

Add the domain into the allow list.

An email containing a URL passes through the Cisco ESA that has content filtering disabled for all mail policies. The sender is sampleuser@test1.com, the recipients are testuser1@test2.com, testuser2@test2.com, testuser3@test2.com, and mailer1@test2.com. The subject of the email is Test Document395898847. An administrator wants to add a policy to ensure that the Cisco ESA evaluates the web reputation score before permitting this email.Which two criteria must be used by the administrator to achieve this? (Choose two.)

Subject contains Test Document"

Email does not match mailer1@test2.com

Cisco 300-720 Practice Test 2 - Free Online Exam Questions 41-80

DRAG DROP

Drag and drop the Cisco ESA reactions to a possible DLP from the left onto the correct action types on the right.

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-720 Practice Test 2

Question

Cisco 300-720 Practice Tests

Practice Tests