Summer Certification Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Pass the Cisco CCNP Security 300-720 Questions and answers with ValidTests

Exam 300-720 All Questions
Exam 300-720 Premium Access

View all detail and faqs for the 300-720 exam

Viewing page 6 out of 6 pages
Viewing questions 51-60 out of questions
Questions # 51:

An organization has multiple Cisco Secure Email Gateway appliances deployed, resulting in several spam quarantines to manage. To manage the quarantined messages, the administrator enabled the centralized spam quarantine on the Cisco Secure Email and Web Manager appliance and configured the external spam quarantine on the Cisco Secure Email Gateway appliances. However, messages are still being directed to the local quarantine on the Cisco Secure Email Gateway appliances What change is necessary to complete the configuration?

Options:

A.

Modify the incoming mail policies on the Cisco Secure Email Gateway appliances to redirect to the external quarantine

B.

Disable the external spam quarantine on the Cisco Secure Email Gateway appliances

C.

Disable the local spam quarantine on the Cisco Secure Email Gateway appliances.

D.

Modify the external spam quarantine settings on the Cisco Secure Email Gateway appliances and change the port to 25

Questions # 52:

An organization is enforcing TLS with an external party. The external business employs its own internal CA so the Secure Email Gateway cannot verify the TLS connection. Which action must an engineer take for the Cisco Secure Email Gateway to trust the connection?

Options:

A.

Choose Add Certificate on the Network > Certificates page and create a self-signed certificate.

B.

Enable a custom list on the Network > Certificates page and upload the certificates for the trusted authorities.

C.

Modify Destination Controls and set TLS Support to Required for all external and internal destinations.

D.

Edit Destination Controls and add the external party domain to the Destination Control Table as trusted.

Questions # 53:

What is the purpose of Cisco Email Encryption on Cisco ESA?

Options:

A.

to ensure anonymity between a recipient and MTA

B.

to ensure integrity between a sender and MTA

C.

to aut henticate direct communication between a sender and Cisco ESA

D.

to ensure privacy between Cisco ESA and MTA

Questions # 54:

Which setting affects the aggressiveness of spam detection?

Options:

A.

protection level

B.

spam threshold

C.

spam timeout

D.

maximum depth of recursion scan

Questions # 55:

An organization wants to designate help desk personnel to assist with tickets that request the release of messages from the spam quarantine because company policy does not permit direct end-user access to the quarantine. Which two roles must be used to allow help desk personnel to release messages while restricting their access to make configuration changes in the Cisco Secure Email Gateway? (Choose two.)

Options:

A.

Administrator

B.

Help Desk User

C.

Read-Only Operator

D.

Technician

E.

Quarantine Administrator

Questions # 56:

Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.

Question # 56

Options:

Questions # 57:

A Cisco Secure Email Gateway appliance is processing many messages that are sent to invalid recipients verification. Which two steps are required to accomplish this task? (Choose two.)

Options:

A.

Enable external LDAP authentication

B.

Configure the LDAP query on a listener

C.

Configure LDAP server profiles

D.

Enable LDAP authentication on a listener

E.

Configure incoming mail policy to query LDAP server

Questions # 58:

Which two action types are performed by Cisco ESA message filters? (Choose two.)

Options:

A.

non-final actions

B.

filter actions

C.

discard actions

D.

final actions

E.

quarantine actions

Questions # 59:

An admin istrator is managing multiple Cisco ESA devices and wants to view the quarantine emails from all devices in a central location.

How is this accomplished?

Options:

A.

Disable the VOF feature before sending SPAM to the external quarantine.

B.

Configure a mail p olicy to determine whether the message is sent to the local or external quarantine.

C.

Disable the local quarantine before sending SPAM to the external quarantine.

D.

Configure a user policy to determine whether the message is sent to the local or exte rnal quarantine.

Questions # 60:

An engineer must configure Cisco Secure Email Gateway to scan all email from the HR department for viruses. The Sophos scanning engine must be used, and messages that potentially

still contain viruses after repair must be quarantined. These configurations were performed already:

•Enable antivirus scanning on the email gateway.

•Create a mail policy for the HR department.

Which two actions must be taken to complete the configuration? (Choose two.)

Options:

A.

From the Message Scanning settings, enable Scan and Repair Viruses.

B.

Configure Virus Infected Message Handling to quarantine the messages.

C.

From the Message Scanning settings, enable the dropping of attachments.

D.

From the Message Scanning settings, enable Scan for Viruses only.

E.

Configure Unscannable Message Handling to quarantine the messages.

Viewing page 6 out of 6 pages
Viewing questions 51-60 out of questions