300-720 Online Practice Questions and Answers

Which action must be taken before a custom quarantine that is being used can be deleted?

A. Delete the quarantine that is assigned to a filter.

B. Delete the quarantine that is not assigned to a filter.

C. Delete only the unused quarantine.

D. Remove the quarantine from the message action of a filter.

Which action is a valid fallback when a client certificate is unavailable during SMTP authentication on Cisco ESA?

A. LDAP Query

B. SMTP AUTH

C. SMTP TLS

D. LDAP BIND

Which type of query must be configured when setting up the Spam Quarantine while merging notifications?

A. Spam Quarantine Alias Routing Query

B. Spam Quarantine Alias Consolidation Query

C. Spam Quarantine Alias Authentication Query

D. Spam Quarantine Alias Masquerading Query

Which feature must be configured before an administrator can use the outbreak filter for nonviral threats?

A. quarantine threat level

B. antispam

C. data loss prevention

D. antivirus

Which global setting is configured under Cisco ESA Scan Behavior?

A. minimum attachment size to scan

B. attachment scanning timeout

C. actions for unscannable messages due to attachment type

D. minimum depth of attachment recursion to scan

A Cisco ESA administrator has noticed that new messages being sent to the Centralized Policy Quarantine are being released after one hour. Previously, they were being held for a day before being released.

What was configured that caused this to occur?

A. The retention period was changed to one hour.

B. The threshold settings were set to override the clock settings.

C. The retention period was set to default.

D. The threshold settings were set to default.

What are organizations trying to address when implementing a SPAM quarantine?

A. true positives

B. false negatives

C. false positives

D. true negatives

Refer to the exhibit.

Which configuration allows the Cisco ESA to scan for executables inside the zip and apply the action as per the content filter?

A. Modify the content filter to look for .exe filename instead of executable filetype.

B. Configure the recursion depth to a higher value.

C. Configure the maximum attachment size to a higher value.

D. Modify the content filter to look for attachment filetype of compressed.

An engineer tries to implement phishing simulations to test end users, but they are being blocked by the Cisco ESA. Which two components, when added to the allow list, allow these simulations to bypass antispam scanning? (Choose two.)

A. receivers

B. domains

C. reputation score

D. spf check

E. senders

An engineer must limit responses from the gateway that are directed to invalid email addresses. How should the LDAP server be configured to accomplish this goal?

A. Validate the sender email address via an LDAP query during the SMTP conversation.

B. Validate the sender email address via SMTP Call-Ahead to query an external SMTP server.

C. Limit the number of invalid recipients per sender to stop responses after crossing the threshold.

D. Limit the number of invalid responses per recipient to stop responses after crossing the threshold.