[Dec-2021] Free 300-720 Exam Questions 300-720 Actual Free Exam Questions [Q44-Q59]

Share

[Dec-2021] Free 300-720 Exam Questions 300-720 Actual Free Exam Questions

Verified 300-720 dumps and 92 unique questions


Exam 300-720 Domains

Here are the main topics that will be tested in the Cisco 300-720:

  • Systems quarantines in addition to delivery processes.
  • LDAP & SMTP sessions;
  • Cisco Email ESA administration;
  • Using Talos SenderBase as well as anti-spam for spam control;
  • Authenticating and encrypting Emails;
  • Filters for content as well as messages;

The above-discussed areas are the most common in the actual exam, but testing is not necessarily limited to them. The guidelines may change so you are advised to revise extensively for the official exam so that you pass it in one go.


Is there any Prerequisites for Cisco 300-720 Exam

  • Prerequisites: None

 

NEW QUESTION 44
Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)

  • A. active-active
  • B. SLA monitor
  • C. active-standby
  • D. load balancing
  • E. failover

Answer: D,E

Explanation:
Explanation
You can enter multiple host names to configure the LDAP servers for failover or load-balancing. Separate multiple entries with commas.

 

NEW QUESTION 45
An organization wants to use DMARC to improve its brand reputation by leveraging DNS records.
Which two email authentication mechanisms are utilized during this process? (Choose two.)

  • A. PKI
  • B. DKIM
  • C. DSTP
  • D. TLS

Answer: C,D

 

NEW QUESTION 46
When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

  • A. 120 seconds
  • B. 60 seconds
  • C. 90 seconds
  • D. 30 seconds

Answer: B

Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html

 

NEW QUESTION 47
Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.

Answer:

Explanation:

 

NEW QUESTION 48
Which two certificate authority lists are available in Cisco ESA? (Choose two.)

  • A. default
  • B. user
  • C. demo
  • D. custom
  • E. system

Answer: D,E

Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_011000.html#task_1194859

 

NEW QUESTION 49
Email encryption is configured on a Cisco ESA that uses CRES.
Which action is taken on a message when CRES is unavailable?

  • A. It is dropped and an error message is sent to the sender.
  • B. It is sent in clear text.
  • C. It is encrypted by a Cisco encryption appliance.
  • D. It is requeued.

Answer: B

Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117863- configure-esa-00.html

 

NEW QUESTION 50
Which two factors must be considered when message filter processing is configured? (Choose two.)

  • A. lateral processing
  • B. mail policies
  • C. message-filter order
  • D. structure of the combined packet
  • E. MIME structure of the message

Answer: C,E

 

NEW QUESTION 51
What are two prerequisites for implementing undesirable URL protection in Cisco ESA? (Choose two.)

  • A. Enable port bouncing.
  • B. Enable email relay.
  • C. Enable antispam scanning.
  • D. Enable outbreak filters.
  • E. Enable antivirus scanning.

Answer: C,D

 

NEW QUESTION 52
A Cisco ESA administrator has noticed that new messages being sent to the Centralized Policy Quarantine are being released after one hour. Previously, they were being held for a day before being released.
What was configured that caused this to occur?

  • A. The threshold settings were set to override the clock settings.
  • B. The retention period was changed to one hour.
  • C. The retention period was set to default.
  • D. The threshold settings were set to default.

Answer: D

 

NEW QUESTION 53
An analyst creates a new content dictionary to use with Forged Email Detection.
Which entry will be added into the dictionary?

Answer: B

Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/products/collateral/security/email-security-appliance/ whitepaper_C11-737596.html

 

NEW QUESTION 54
Which component must be added to the content filter to trigger on failed SPF Verification or DKIM Authentication verdicts?

  • A. condition
  • B. parameter
  • C. status
  • D. response

Answer: A

 

NEW QUESTION 55
An analyst creates a new content dictionary to use with Forged Email Detection.
Which entry will be added into the dictionary?

Answer: B

 

NEW QUESTION 56
An organization wants to use its existing Cisco ESA to host a new domain and enforce a separate corporate policy for that domain.
What should be done on the Cisco ESA to achieve this?

  • A. Use the altrchost command to add a separate gateway for the new domain.
  • B. Use the smtproutes command to configure a SMTP route for the new domain.
  • C. Use the dsestconf command to add a separate destination for the new domain.
  • D. Use the deli very config command to configure mail delivery for the new domain.

Answer: B

 

NEW QUESTION 57
What occurs when configuring separate incoming mail policies?

  • A. message exceptions
  • B. message detachment
  • C. message splintering
  • D. message aggregation

Answer: C

 

NEW QUESTION 58
When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)

  • A. delay
  • B. redirect
  • C. drop
  • D. abandon
  • E. return

Answer: A,B

 

NEW QUESTION 59
......

Latest 100% Passing Guarantee - Brilliant 300-720 Exam Questions PDF: https://www.actualtestsit.com/Cisco/300-720-exam-prep-dumps.html

300-720 Dumps for Pass Guaranteed - Pass 300-720 Exam: https://drive.google.com/open?id=15mxrzBBGmIVCsXQHTp-zu3ImKKJt6AtU