Pass Your CCNP Security 300-720 Exam Easily with Accurate PDF Questions [Oct 27, 2022]
300-720 Certification Exam Dumps Questions in here
What is the amount for Cisco 300-720 Exam
- The price of the Cisco 300-720 Exam is $300 USD.
Details about 300-720 Test
The Cisco 300-720 exam appears in the list of concentration tests that lead to the CCNP Security. This implies that you only attempt it after succeeding in 350-701 test that deals with matters to do with core technologies. Overall, you are given 1.5 hours to answer all the questions coming in the real exam, which is available in both English & Japanese. The test, in particular, will assess your understanding of the Cisco ESA in different areas. This includes administration, how well you can handle spam control as well as anti-spam, message filters, preventing the loss of data, and LDAP. You will also be tested on how to authenticate emails and encrypt them as well as matters to do with system quarantines in addition to delivery methods.
NEW QUESTION 22
When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)
- A. abandon
- B. drop
- C. return
- D. delay
- E. redirect
Answer: D,E
NEW QUESTION 23
Which two steps are needed to disable local spam quarantine before external quarantine is enabled? (Choose two.)
- A. Check the External Safelist/Blocklist check box.
- B. Select External Spam Quarantine and click on Configure.
- C. Select Monitor and click Spam Quarantine.
- D. Select Security Services and click Spam Quarantine.
- E. Uncheck the Enable Spam Quarantine check box.
Answer: C,E
Explanation:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118555-qa-esa- 00.html (configuration summary)
NEW QUESTION 24
Which two certificate authority lists are available in Cisco ESA? (Choose two.)
- A. demo
- B. default
- C. custom
- D. system
- E. user
Answer: C,D
NEW QUESTION 25
A Cisco ESA administrator has several mail policies configured. While testing policy match using a specific sender, the email was not matching the expected policy.
What is the reason of this?
- A. The message header with the highest priority is checked against the Default policy in a top-down fashion.
- B. The message header with the highest priority is checked against each policy in a top-down fashion.
- C. The To" header is checked against all policies in a top-down fashion.
- D. The Tram* header is checked against all policies in a top-down fashion.
Answer: A
NEW QUESTION 26
What is the default HTTPS port when configuring spam quarantine on Cisco ESA?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/ b_ESA_Admin_Guide_ces_11_1/b_ESA_Admin_Guide_chapter_011111.pdf
NEW QUESTION 27
Which SMTP extension does Cisco ESA support for email security?
- A. STARTTLS
- B. UTF8SMTP
- C. ETRN
- D. PIPELINING
Answer: A
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011000.html
NEW QUESTION 28
Which default port is used by the Cisco ESA to quarantine the message on the Cisco Security Management Appliance?
- A. port4766/UDP
- B. port443/TCP
- C. port110/TCP
- D. port 6025/TCP
- E. port 25fTCP
Answer: D
NEW QUESTION 29 
Refer to the exhibit. Which configuration on the scan behavior must be updated to allow the attachment to be scanned on the Cisco ESA?
- A. Add an additional mapping for attachment type for zip files.
- B. Enable assume match pattern if the email was not scanned for any reason.
- C. Increase the maximum attachment size to scan to a larger value.
- D. Increase the maximum recursion depth from 5 to a larger value.
Answer: A
NEW QUESTION 30
Which action must be taken before a custom quarantine that is being used can be deleted?
- A. Delete the quarantine that is assigned to a filter.
- B. Delete only the unused quarantine.
- C. Remove the quarantine from the message action of a filter.
- D. Delete the quarantine that is not assigned to a filter.
Answer: C
NEW QUESTION 31
Which ESA function maintains a set of rules that control incoming connections from remote hosts for a listener?
- A. LDAP
- B. Sender group
- C. HAT
- D. VEST
- E. RAT
Answer: C
NEW QUESTION 32
An administrator identifies that, over the past week, the Cisco ESA is receiving many emails from certain senders and domains which are being consistently quarantined. The administrator wants to ensure that these senders and domain are unable to send anymore emails.
Which feature on Cisco ESA should be used to achieve this?
- A. incoming mail policies
- B. safelist
- C. blocklist
- D. S/MIME Sending Profile
Answer: A
NEW QUESTION 33 
Refer to the exhibit. An engineer is trying to connect to a Cisco ESA using SSH and has been unsuccessful.
Upon further inspection, the engineer notices that there is a loss of connectivity to the neighboring switch.
Which connection method should be used to determine the configuration issue?
- A. HTTPS
- B. Telnet
- C. serial
- D. Ethernet
Answer: C
NEW QUESTION 34
Which two action types are performed by Cisco ESA message filters? (Choose two.)
- A. filter actions
- B. final actions
- C. non-final actions
- D. quarantine actions
- E. discard actions
Answer: B,C
NEW QUESTION 35
When email authentication is configured on Cisco ESA, which two key types should be selected on the signing profile? (Choose two.)
- A. Symmetric Keys
- B. Private Keys
- C. Public Keys
- D. DKIM
- E. Domain Keys
Answer: D,E
NEW QUESTION 36
What occurs when configuring separate incoming mail policies?
- A. message exceptions
- B. message aggregation
- C. message splintering
- D. message detachment
Answer: C
NEW QUESTION 37
......
The Cisco 300-720 SESA (Securing Email with Cisco Email Security Appliance) is an exam designed to assess your know-how of the Cisco Email Security Appliance (ESA). It helps you evaluate how well you understand and whether you can use the related technology around Email security. Also, this exam together with 350-701 leads to the CCNP Security and the Cisco Certified Specialist - Email Content Security certificates. The latter applies to 300-720 test alone.
Verified 300-720 dumps Q&As 100% Pass in First Attempt Guaranteed Updated Dump: https://drive.google.com/open?id=15A1nzJKzkk6l6Q27ufkcXbFW1Y70ruIs
Updated 300-720 Exam Practice Test Questions: https://www.dumpexams.com/300-720-real-answers.html