Refer to the exhibit. An engineer needs to change the existing Forged Email Detection message filter so that it references a newly created dictionary named 'Executives'.What should be done to accomplish this task?

Change "support" to "Executives".

An engineer is tasked with reviewing mail logs to confirm that messages sent from domain abc.com are passing SPF verification and being accepted by the Cisco ESA. The engineer notices that SPF verification is not being performed and that SPF is not being referenced in the logs for messages sent from domain abc.com.Why is the verification not working properly?

SPF verification is disabled on the Mail Flow Policy.

SPF verification is disabled in the Recipient Access Table.

SPF verification is disabled on the Mail Flow Policy.

The SPF conformance level is set to SIDF compatible on the Mail Flow Policy.

An SPF verification Content Filter has not been created.

What is the purpose of Cisco Email Encryption on Cisco ESA?

to ensure privacy between Cisco ESA and MTA

to ensure anonymity between a recipient and MTA

to ensure integrity between a sender and MTA

to authenticate direct communication between a sender and Cisco ESA

to ensure privacy between Cisco ESA and MTA

A Cisco ESA administrator has noticed that new messages being sent to the Centralized PolicyQuarantine are being released after one hour. Previously, they were being held for a day before being released.What was configured that caused this to occur?

The retention period was set to default.

The retention period was changed to one hour.

The threshold settings were set to override the clock settings.

The retention period was set to default.

The threshold settings were set to default.

What is the purpose of checking the CRL during SMTP authentication on a Cisco Secure Email Gateway?

Check if the certificate is not revoked.

Validate the date to check if the certificate is still valid

Check if the certificate is not revoked.

Confirm that corresponding CA is present

Verify the common name matches user ID

When the spam quarantine is configured on the Cisco Secure Email Gateway, which type of query is used to validate non administrative user access to the end-user quarantine via LDAP?

spam quarantine end-user authentication

spam quarantine alias consolidation

spam quarantine external authorization

local mailbox (IMAP/POP) authentication

An administrator notices that incoming emails with certain attachments do not get delivered to all recipients when the emails have multiple recipients in different domains like cisco.com and test.com.The same emails when sent only to recipients in cisco.com are delivered properly. How must the Cisco Secure Email Gateway be configured to avoid this behavior?

Modify mail policies so email recipients do not match multiple policies.

Modify mail policies for cisco.com to ensure that emails are not dropped.

Modify mail policies so email recipients do not match multiple policies.

Modify DLP configuration to ensure that all attachments are permitted for test.com.

Modify DLP configuration to exempt DLP scanning for messages sent to test.com domain

Which of the following two steps are required to enable Cisco SecureX integration on a Cisco Secure Email Gateway appliance? (Choose two.)

Enable the Threat Response service under Network>Cloud Service Settings.

Select the correct Threat Response Server based on your region.

Paste in the Registration Token generated from the Smart Licensing Account

Enable the Threat Response service under Network>Cloud Service Settings.

Select the correct Threat Response Server based on your region.

Paste in the Registration Token generated from the Security Services Exchange.

Enable the Security Services Exchange service under Network>Cloud Service Settings

What are the two different phases in the process of Cisco Secure Email Gateway performing S/MIME encryption? (Choose two.)

Attach the encrypted symmetric key to the message

Create a pseudo-random session key.

Attach the encrypted public key to the message

Encrypt the message body using the session key

Send the encrypted message to the sender

Attach the encrypted symmetric key to the message

Create a pseudo-random session key.

A network engineer must tighten up the SPAM control policy of an organization due to a recent SPAM attack. In which scenario does enabling regional scanning improve security for this organization?

when most of the received email originates from a specific region

when most of the received spam comes from a specific country

when most of the received spam originates outside of the U.S.

when most of the received email originates outside of the U.S.

when most of the received email originates from a specific region

A security administrator deployed a Cisco Secure Email Gateway appliance with a mail policy configured to store suspected spam for review. The appliance is the DMZ and only the standard HTTP/HTTPS ports are allowed by the firewall. An administrator wants to ensure that users can view any suspected spam that was blocked. Which action must be taken to meet this requirement?

Enable End-User Quarantine Access and point to an LDAP server for authentication.

Enable the external Spam Quarantine and enter the IP address and port for the Secure Email and Web Manager

Enable the Spam Quarantine and leave the default settings unchanged.

Enable End-User Quarantine Access and point to an LDAP server for authentication.

Enable the Spam Quarantine and specify port 80 for HTTP and port 443 for HTTPS

An engineer deploys a Cisco Secure Email Gateway appliance with default settings in an organization that permits only standard H feature does not work. Which additional action resolves the issue?

TP/HTTPS ports outbound and notices that the AMP file reputation

Configure the outbound firewall rule to permit traffic on port 8081

Enable the Use HTTP option under Advanced Settings for File Reputation.

Enable the Use SSL option under Advanced Settings for File Reputation.

Configure the outbound firewall rule to permit traffic on port 3237

TP/HTTPS ports outbound and notices that the AMP file reputation

Which restriction is in place for end users accessing the spam quarantine on Cisco Secure Email Gateway appliances?

Direct access via web browser requires authentication.

Access via a link in a notification is mandatory.

The end user must be assigned to the Guest role

Direct access via web browser requires authentication.

Authentication is required when accessing via a link in a notification.

Refer to the exhibit. Which configuration allows the Cisco Secure Email Gateway to scan for executables inside the archive file and apply the action as per the content filter?

Configure the recursion depth to a higher value.

Modify the content filter to look for attachment filetype of compressed.

Configure the maximum attachment size to a higher value.

Modify the content filter to look for exe filename instead of executable filetype.

Spammers routinely try to send emails with the recipient field filled with a list of all possible combinations of letters and numbers. These combinations, appended with a company domain name are malicious attempts at learning all possible valid email addresses. Which action must be taken on a Cisco Secure Email Gateway to prevent this from occurring?

Perform LDAP acceptance validation.

Select the SMTP Authentication Query checkbox

Perform LDAP acceptance validation.

Quarantine external authentication queries.

Enable end user safelist features

A Cisco Secure Email Gateway appliance is processing many messages that are sent to invalid recipients verification. Which two steps are required to accomplish this task? (Choose two.)

Configure the LDAP query on a listener

Enable external LDAP authentication

Configure the LDAP query on a listener

Enable LDAP authentication on a listener

Configure incoming mail policy to query LDAP server

The CEO added a sender to a safelist but does not receive an important message expected from the trusted sender. An engineer evaluates message tracking on the Cisco Secure Email Gateway appliance and determines that the message was dropped by the antivirus engine. What is the reason for this behavior?

End-user safelists apply to antispam engines only.

The sender is included in an ISP blocklist

Administrative access is required to create a safelist.

The sender didn't mark the message as urgent

End-user safelists apply to antispam engines only.

A company has recently updated their security policy and now wants to drop all email messages larger than 100 MB coming from external sources. The Cisco Secure Email Gateway is LDAP integrated and all employee accounts are in the group "Employees". Which filter rule configuration provides the desired outcome?

if (mail-from-group == 'Employees') and (body-size > "100M") {drop()}

if (mail-from-group != 'Employees') and (body-size > 100M) {drop();}

if (mail-from-group == 'Employees') and (body-size > 100M) {bounce();}

if ('mail-from-group != Employees') and (body-size > 100M) {drop();}

A Cisco Secure Email Gateway administrator must provide outbound email authenticity and configures a DKIM signing profile to handle this task. What is the next step to allow this organization to use DKIM for their outbound email?

Export the DNS TXT record to provide to the DNS registrar

Enable the DKIM service checker

Export the DNS TXT record to provide to the DNS registrar

Import the DNS record of the service provider into the Cisco Secure Email Gateway.

Configure the Trusted Sender Group message authenticity policy.

Which functionality is impacted if the assigned certificate under one of the IP interfaces is modified?

HTTPS traffic when connecting to the web user interface of the Cisco Secure Email Gateway

traffic between the Cisco Secure Email Gateway and the LDAP server

emails being delivered from the Cisco Secure Email Gateway

HTTPS traffic when connecting to the web user interface of the Cisco Secure Email Gateway

emails being received by the Cisco Secure Email Gateway

A trusted partner of an organization recently experienced a new campaign that was leveraging JavaScript attachments to trick users into executing malware. As a result, they created a local policy to deny messages with JavaScript attachments. Which action should the administrator of the organization take to ensure encrypted communications are delivered to the intended partner recipient?

Create a new encryption profile and deselect the 'Use-Script' envelope settings option.

Insert the X-PostX-Use-Script' header with a value of false to the encrypted messages

Select JavaScript-free' option within the Cisco Secure Email Encryption Service Add-in

Create an outgoing content filter and add the Encrypt and Deliver Nov/ action with Use-Script option deselected

Create a new encryption profile and deselect the 'Use-Script' envelope settings option.

Cisco 300-720 Practice Test 3 - Free Online Exam Prep & Questions

A recent engine update was pulled down for graymail and has caused the service to start crashing. It is critical to fix this as quickly as possible.

What must be done to address this issue?

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-720 Practice Test 3

Question

Cisco 300-720 Practice Tests

Practice Tests