Refer to the exhibit. For improved security, an administrator wants to warn users about opening any links or attachments within an email How must the administrator configure an HTML-coded message at the top of an email body to create this warning?

Create a text resource type of Disclaimer Template change to code view to paste the HTML code into the text box, then use this text resource inside a content filter

Create a text resource type of Disclaimer Template paste the HTML code into the text box. then use this text resource inside a content filter

Create a text resource type of Disclaimer Template change to code view to paste the HTML code into the text box, then use this text resource inside a content filter

Create a text resource type of Notification Template, paste the HTML code into the text box, then use this text resource inside a content filter.

Create a text resource type of Notification Template, change to code view to paste the HTML code into the text box. then use this text resource inside a content filter.

Which of the following two statements are correct about the large file attachments (greater than 25MB) feature in Cisco Secure Email Encryption Service? (Choose two.)

Large file attachments will be sent as a securedoc attachment

This feature can only be enabled if the Read from Message feature is enabled

Large file attachments can only be sent using the websafe portal

This feature allows users to send up to 50MB of attachments in a secure email.

Large file attachments will be sent as a securedoc attachment

Large file attachments can only be sent using the Cisco Secure Email Add-In.

This feature can only be enabled if the Read from Message feature is enabled

Which cloud service provides a reputation verdict for email messages based on the sender domain and other attributes?

Cisco Secure Email Threat Defense

A Cisco Secure Email Gateway administrator recently enabled the Outbreak Filters Global ServiceSetting to detect Viral as well as Non-Viral threat detection, with no detection of Non-viral threats after 24 hours of monitoring Outbreak Filters What is the reason that Non-Viral threat detection is not detecting any positive verdicts?

Non-Viral threat detection requires AntiSpam or Intelligent Multi-Scan enablement to properly function.

Non-Viral threat detection requires Antivirus or AMP enablement to properly function

The Outbreak Filters option Graymail Header must be enabled

Non-Viral threat detection requires AntiSpam or Intelligent Multi-Scan enablement to properly function.

The Outbreak Filters option URL Rewriting must be enabled.

The company security policy requires that the finance department have an easy way to apply encryption to their outbound messages that contain sensitive data Users must be able to flag the messages that require encryption versus a Cisco Secure Email Gateway appliance scanning all messages and automatically encrypting via detection Which action enables this capability?

Create an encryption profile and an outgoing content filter that includes \[SECURE\] within the Subject Header: Contains condition along with the Encrypt and Deliver Now action

Create an encryption profile with [SECURE] in the Subject setting and enable encryption on the mail flow policy

Create an outgoing content filter with no conditions and with the Encrypt and Deliver Now action configured with [SECURE] in the Subject setting

Create an encryption profile and an outgoing content filter that includes \[SECURE\] within the Subject Header: Contains condition along with the Encrypt and Deliver Now action

Create a DLP policy manager message action with encryption enabled and apply it to active DLP policies for outgoing mail.

Refer to the exhibit. What results from this filter configuration?

Action is skipping all antivirus checks for the mail

Action is applied to all mail that has the subject "FW: Bounce Notification."

Action is applied to all mail from test@cisco.com.

Action is skipping all antispam checks for the mail.

Refer to the exhibit. Which additional configuration action must be taken to protect against Directory Harvest Attacks?

In the mail flow policy, configure Directory Harvest Attack Prevention.

When LDAP Queries are configured, Directory Harvest Attack Prevention is enabled by default.

In the LDAP Server profile, configure Directory Harvest Attack Prevention

In the mail flow policy, configure Directory Harvest Attack Prevention.

In the Listener Settings, modify the LDAP Queries configuration to use the Work Queue

An organization has multiple Cisco Secure Email Gateway appliances deployed, resulting in several spam quarantines to manage. To manage the quarantined messages, the administrator enabled the centralized spam quarantine on the Cisco Secure Email and Web Manager appliance and configured the external spam quarantine on the Cisco Secure Email Gateway appliances. However, messages are still being directed to the local quarantine on the Cisco Secure Email Gateway appliances What change is necessary to complete the configuration?

Disable the local spam quarantine on the Cisco Secure Email Gateway appliances.

Modify the incoming mail policies on the Cisco Secure Email Gateway appliances to redirect to the external quarantine

Disable the external spam quarantine on the Cisco Secure Email Gateway appliances

Disable the local spam quarantine on the Cisco Secure Email Gateway appliances.

Modify the external spam quarantine settings on the Cisco Secure Email Gateway appliances and change the port to 25

An organization has a strict policy on URLs embedded in emails. The policy allows visibility into what the URL is but does not allow the user to click it. Which action must be taken to meet the requirements of the security policy?

Enable the URL quarantine policy

Redirect the URL to the Cisco security proxy

Which components are required when encrypting SMTP with TLS on a Cisco Secure Email Gateway appliance when the sender requires TLS verification?

X. 509 certificate and matching private key from a CA

DER certificate and matching public key from a CA

self-signed certificate in PKCS#7 format

X. 509 certificate and matching private key from a CA

self-signed certificate in PKCS#12 format

Which content filter condition checks to see if the "From: header" in the message is similar to any of the users in the content dictionary?

Duplicate Boundaries Verification

An engineer must provide differentiated email filtering to executives within the organization Which two actions must be taken to accomplish this task? (Choose two)

Define an LDAP group query to specify users to whom the mail policy rules apply.

Create content filters for actions to take on messages that contain specific data

Define an LDAP group query to specify users to whom the mail policy rules apply.

Create content filters for actions to take on messages that contain specific data

Upload a csv file containing the email addresses for the users for whom you want to create mail policies.

Enable the content-scanning features you want to use with mail policies

Define the default mail policies for incoming or outgoing messages

A list of company executives is routinely being spoofed, which puts the company at risk of malicious email attacks An administrator must ensure that executive messages are originating from legitimate sending addresses Which two steps must be taken to accomplish this task? (Choose two.)

Create an incoming content filter with the Forged Email Detection condition

Create a content dictionary including a list of the names that are being spoofed.

Create an incoming content filter with SPF detection.

Enable the Forged Email Detection feature under Security Settings.

Enable DMARC feature under Mail Policies.

Create an incoming content filter with the Forged Email Detection condition

Create a content dictionary including a list of the names that are being spoofed.

Refer to the exhibit. An administrator has configured File Reputation and File Analysis on the Cisco Secure Email Gateway appliance however it does not function as expected What must be configured on the appliance for this to function?

Configure the Cisco Secure Email Gateway to use SSL for the connection to the File Reputation server

Upload the Root CA certificate for the File Reputation cloud to the Cisco Secure Email Gateway.

Open port 443 on the firewall for the Cisco Secure Email Gateway to connect to the File Reputation cloud.

Configure the Cisco Secure Email Gateway to use SSL for the connection to the File Reputation server

Restart the File Reputation service to force the scanning engine to connect to the File Reputation cloud.

Which action do Outbreak Filters take to stop small-scale and nonviral attacks, such as phishing scams and malware distribution sites?

Rewrite URLs to redirect traffic to potentially harmful websites through a web security proxy

Block all emails from email domains associated with potentially harmful websites.

Strip all attachments from email domains associated with potentially harmful websites.

Quarantine messages that contain links to potentially harmful websites until the site is taken offline

What is the default method of remotely accessing a newly deployed Cisco Secure Email Virtual Gateway when a DHCP server is not available?

Use the IP address of 192.168 42 42 via the Management port

Manual configuration of an IP address is required through the serial port before remote access

DHCP is required for the initial IP address assignment

Use the IP address of 192.168 42 42 via the Management port

Manual configuration of an IP address is required through the hypervisor console before remote access

A network administrator enabled McAfee antivirus scanning on a Cisco Secure Email Gateway and configured the virus scanning action of "scan for viruses only" If the scanner finds a virus in an attachment for an incoming email, what action will be applied to this message?

No repair is attempted, and the attachment is either dropped or delivered

The email and attachment are forwarded to the network administrator.

No repair is attempted, and the attachment is either dropped or delivered

The attachment is dropped and replaced with a "Removed Attachment" file

The system will attempt to repair the attachment

What is a benefit of deploying Cisco Secure Email and Web Manager?

centralized management of quarantined email

centralized management of software updates for Cisco Secure Email Gateway

centralized management of logs for Cisco Secure Email Gateway

centralized management of quarantined email

centralized management of botnet directories

An organization wants to use its existing Cisco ESA to host a new domain and enforce a separate corporate policy for that domain.What should be done on the Cisco ESA to achieve this?

Use the smtproutes command to configure a SMTP route for the new domain.

Use the altrchost command to add a separate gateway for the new domain.

Use the deli very config command to configure mail delivery for the new domain.

Use the dsestconf command to add a separate destination for the new domain.

Use the smtproutes command to configure a SMTP route for the new domain.

Cisco 300-720 Practice Test 4 - Free Online Exam Prep & Questions

An administrator notices that the Cisco Secure Email Gateway delivery queue on an appliance is consistently full. After further investigation, it is determined that the IP addresses currently in use by appliance are being rate-limited by some destinations. The administrator creates a new interface with an additional IP address using virtual gateway technology, but the issue is not solved Which configuration change resolves the issue?

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-720 Practice Test 4

Question

Cisco 300-720 Practice Tests

Practice Tests