[Updated May 2023] Practice the latest Cisco 300-720 exam questions online

Lead4Pass updates Cisco 300-720 dumps throughout the year, and more importantly, provides some free exam questions each time to help candidates practice their tests online!
September 300-720 dumps have been updated, and verified by the Cisco team, as true and effective! Now! Take the newest 300-720 online practice test! also available for download
300-720 dumps with PDF and VCE format: https://www.leads4pass.com/300-720.html (contains 142 latest exam questions and answers!).

Cisco 300-720 Exam Questions Online Practice Test:

From	Number of exam questions	Exam name	Exam code	Last updated
Lead4Pass 300-720 dumps	15	Securing Email with Cisco Email Security Appliance (SESA)	300-720	300-720 SESA Dumps

Question 1:

What is the default port to deliver emails from the Cisco ESA to the Cisco SMA using the centralized Spam Quarantine?

A. 8025

B. 6443

C. 6025

D. 8443

Correct Answer: C

Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure-esa-00.html

Question 2:

Which two action types are performed by Cisco ESA message filters? (Choose two.)

A. non-final actions

B. filter actions

C. discard actions

D. final actions

E. quarantine actions

Correct Answer: AD

Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html

Question 3:

Which two query types are available when an LDAP profile is configured? (Choose two.)

A. proxy consolidation

B. user

C. recursive

D. group

E. routing

Correct Answer: DE

Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011010.html

Question 4:

DRAG DROP

An Encryption Profile has been set up on the Cisco ESA.

Drag and drop the steps from the left for creating an outgoing content filter to encrypt emails that contain the subject “Secure:” into the correct order on the right.

Select and Place:

Correct Answer:

Reference: https://community.cisco.com/t5/email-security/keyword-in-subject-line-to-encrypt-message/td-p/2441383

Question 5:

Which two are configured in the DMARC verification profile? (Choose two.)

A. the name of the verification profile

B. the minimum number of signatures to verify

C. ESA listeners to use the verification profile

D. message action into an incoming or outgoing content filter

E. message action to take when the policy is rejected/quarantine

Correct Answer: AE

Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_010101.html#task_1231917

Question 6:

An administrator identifies that, over the past week, the Cisco ESA is receiving many emails from certain senders and domains which are being consistently quarantined. The administrator wants to ensure that these senders and domains are unable to send any more emails.

Which feature on Cisco ESA should be used to achieve this?

A. incoming mail policies

B. safelist

C. blocklist

D. S/MIME Sending Profile

Correct Answer: A

Question 7:

Which benefit does enabling external spam quarantine on Cisco SMA provide?

A. ability to back up spam quarantine from multiple Cisco ESAs to one central console

B. access to the spam quarantine interface on which a user can release, duplicate, or delete

C. ability to scan messages by using two engines to increase a catch rate

D. ability to consolidate spam quarantine data from multiple Cisco ESA to one central console

Correct Answer: D

Reference: https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-0/user_guide/b_SMA_Admin_Guide/b_SMA_Admin_Guide_chapter_010101.html

Question 8:

What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?

A. provisioned email encryption profile

B. message encryption from a content filter that selects “Message Encryption” over TLS

C. message encryption from the mail flow policies with “CRES” selected

D. content filter to forward the email to the Cisco Registered Envelope server

Correct Answer: B

Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_010010.html

Question 9:

Which two features are applied to either incoming or outgoing mail policies? (Choose two.)

A. Indication of Compromise

B. application filtering

C. outbreak filters

D. sender reputation filtering

E. antivirus

Correct Answer: CE

Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html

Question 10:

Which suboption must be selected when LDAP is configured for Spam Quarantine End-User Authentication?

A. Designate as the active query

B. Update Frequency

C. Server Priority

D. Entity ID

Correct Answer: A

Reference: https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-5/user_guide/b_SMA_Admin_Guide_11_5/b_SMA_Admin_Guide_11_5_chapter_01010.html

Question 11:

When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

A. 30 seconds

B. 90 seconds

C. 60 seconds

D. 120 seconds

Correct Answer: C

Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html

Question 12:

An engineer is testing mail flow on a new Cisco ESA and notices that messages for the domain abc.com are stuck in the delivery queue. Upon further investigation, the engineer notices that the messages pending delivery are destined for 192.168.1.11 when they should instead be routed to 192.168.1.10.

What configuration change is needed to address this issue?

A. Add an address list for the domain abc.com.

B. Modify Destination Controls entry for the domain abc.com.

C. Modify the SMTP route for the domain and change the IP address to 192.168.1.10.

D. Modify the Routing Tables and add a route for the IP address to 192.168.1.10.

Correct Answer: C

Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118136-qanda-esa-00.html

Question 13:

A Cisco ESA administrator has several mail policies configured. While testing policy matches using a specific sender, the email was not matching the expected policy. What is the reason for this?

A. The “From” header is checked against all policies in a top-down fashion.

B. The message header with the highest priority is checked against each policy in a top-down fashion.

C. The “To” header is checked against all policies in a top-down fashion.

D. The message header with the highest priority is checked against the Default policy in a top-down fashion.

Correct Answer: D

Question 14:

When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)

A. redirect

B. return

C. drop

D. delay

E. abandon

Correct Answer: AD

Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01110.html

Question 15:

Which global setting is configured under Cisco ESA Scan Behavior?

A. minimum attachment size to scan

B. attachment scanning timeout

C. actions for unscannable messages due to attachment type

D. minimum depth of attachment recursion to scan

Correct Answer: B

Reference: https://community.cisco.com/t5/email-security/cisco-ironport-esa-security-services-scan-behavior-impact-on-av/td-p/3923243

…

---

Summarize:

Every free sharing of Cisco 300-720 exam questions is the hard work of our Cisco team, and we hope to help you improve your strength!
Now, use 300-720 PDF dumps or 300-720 VCE dumps: https://www.leads4pass.com/300-720.html (both formats contain the latest exam questions and answers!) Also, get 15% off with code “Cisco”!