Securing Email with Cisco Email Security Appliance (300-720) Free Practice Test

Question 1

An engineer must configure Directory Harvest Attack Prevention for SMTP in Cisco Secure Email Gateway.
This error message must be sent when the listener receives more than 50 invalid recipients per hour.
*500 - Too many requests
*Max. Invalid Recipients Per Hour was set to 50 already.
Which two actions must be taken next to set maximum invalid recipients per hour to meet the requirement?
(Choose two.)

A. Apply Max. Recipients Per Hour Text to 500 - Too many requests.

B. Implement Max. Recipients Per Hour Text to 500 - Too many requests.

C. Set Max. Recipients Per Hour Text to Too many requests.

D. Create Max. Recipients Per Hour Code to 500.

E. Configure Max. Recipients Per Hour Code to 500.

Correct Answer: B,E

Question 2

Refer to the exhibit. A security engineer must configure a Cisco Secure Email Gateway to ensure that encryption is enabled and the configured profile is provisioned. Which command must be used?

A. check encryption

B. profiles

C. provision

D. setup

Correct Answer: C

Question 3

A Cisco Secure Email Gateway appliance is processing many messages that are sent to invalid recipients verification. Which two steps are required to accomplish this task? (Choose two.)

A. Configure LDAP server profiles

B. Enable external LDAP authentication

C. Configure incoming mail policy to query LDAP server

D. Enable LDAP authentication on a listener

E. Configure the LDAP query on a listener

Correct Answer: A,E

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 4

Drag and drop the actions from the left into sequence on the right to validate the authenticity of email on a Cisco Secure Email Gateway by using DNS records.

Correct Answer:

Question 5

A Cisco Secure Email Gateway administrator must provide outbound email authenticity and configures a DKIM signing profile to handle this task. What is the next step to allow this organization to use DKIM for their outbound email?

A. Enable the DKIM service checker

B. Configure the Trusted Sender Group message authenticity policy.

C. Export the DNS TXT record to provide to the DNS registrar

D. Import the DNS record of the service provider into the Cisco Secure Email Gateway.

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

What are two phases of the Cisco ESA email pipeline? (Choose two.)

A. workqueue

B. delivery

C. quarantine

D. action

E. reject

Correct Answer: A,B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

An engineer must configure an incoming antispam mail policy in Cisco Secure Email Gateway for IT users.
The solution must meet these requirements: *The policy must be editable only by administrators.
*The policy must be activated for all incoming emails that are destined for [email protected] .
These configurations have been performed already:
*Create an incoming mail policy.
*Set the name and the role to admin.
*Activate the antispam security service.
Which two additional actions must be taken to complete the configuration? (Choose two.)

A. Set Following Recipients to [email protected] com.

B. Enable Following Senders to [email protected].

C. Configure the recipients for the policy to any Recipient.

D. Configure the senders for the policy to any Sender.

E. Set Following Recipients to [email protected].

Correct Answer: D,E

Question 8

Refer to the exhibit. An engineer needs to change the existing Forged Email Detection message filter so that it references a newly created dictionary named 'Executives'.
What should be done to accomplish this task?

A. Change fed ' to " Executives " .

B. Change " support " to " Executives " .

C. Change " TESF to " Executives " .

D. Change " from " to " Executives " .

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

What is the default behavior of any listener for TLS communication?

A. off

B. required

C. preferred-verify

D. preferred

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

Email encryption is configured on a Cisco ESA that uses CRES.
Which action is taken on a message when CRES is unavailable?

A. It is requeued.

B. It is encrypted by a Cisco encryption appliance.

C. It is sent in clear text.

D. It is dropped and an error message is sent to the sender.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

Refer to the exhibit.

A network engineer must set up a content filter to find any messages that failed SPF and send them into quarantine The content filter has been set up and enabled, but all messages except those that have failed SPF are being sent into quarantine. Which section of the filter must be modified to correct this behavior?

A. log-entry

B. quarantine

C. skip-filters

D. spf-status

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

An organization has multiple Cisco Secure Email Gateway appliances deployed, resulting in several spam quarantines to manage. To manage the quarantined messages, the administrator enabled the centralized spam quarantine on the Cisco Secure Email and Web Manager appliance and configured the external spam quarantine on the Cisco Secure Email Gateway appliances. However, messages are still being directed to the local quarantine on the Cisco Secure Email Gateway appliances What change is necessary to complete the configuration?

A. Modify the external spam quarantine settings on the Cisco Secure Email Gateway appliances and change the port to 25

B. Modify the incoming mail policies on the Cisco Secure Email Gateway appliances to redirect to the external quarantine

C. Disable the local spam quarantine on the Cisco Secure Email Gateway appliances.

D. Disable the external spam quarantine on the Cisco Secure Email Gateway appliances

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 13

When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?

A. Spam Quarantine Alias Consolidation Query

B. Spam Quarantine External Authentication Query

C. Enabling the End-User Safelist/Blocklist feature

D. Spam Quarantine End-User Authentication Query

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 14

What is the maximum message size that can be configured for encryption on the Cisco ESA?

A. 15 MB

B. 25 MB

C. 30 MB

D. 20 MB

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Welcome to TestSimulate

Cisco Securing Email with Cisco Email Security Appliance (300-720) Free Practice Test