CCNP Security Certified Official Practice Test 300-720 – Nov-2022 [Q34-Q58]

4/5 - (3 votes)

CCNP Security Certified Official Practice Test 300-720 – Nov-2022

Ace Cisco 300-720 Certification with Actual Questions Nov 13, 2022 Updated

NO.34 Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?

Set up the interface group with the flag.

Issue the altsrchost command.

Map the envelope sender address to the host.

Apply a filter on the message.

NO.35 What is the order of virus scanning when multilayer antivirus scanning is configured?

The default engine scans for viruses first and the McAfee engine scans for viruses second.

The Sophos engine scans for viruses first and the McAfee engine scans for viruses second.

The McAfee engine scans for viruses first and the default engine scans for viruses second.

The McAfee engine scans for viruses first and the Sophos engine scans for viruses second.

NO.36 Refer to the exhibit. Which configuration on the scan behavior must be updated to allow the attachment to be scanned on the Cisco ESA?

Add an additional mapping for attachment type for zip files.

Enable assume match pattern if the email was not scanned for any reason.

Increase the maximum recursion depth from 5 to a larger value.

Increase the maximum attachment size to scan to a larger value.

NO.37 An administrator is trying to enable centralized PVO but receives the error, “Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level.” What is the cause of this error?

Content filters are configured at the machine-level on esa1.

DLP is configured at the cluster-level on esa2.

DLP is configured at the domain-level on esa1.

DLP is not configured on host1.

NO.38 A Cisco ESA administrator was notified that a user was not receiving emails from a specific domain. After reviewing the mail logs, the sender had a negative sender-based reputation score.
What should the administrator do to allow inbound email from that specific domain?

Create a new inbound mail policy with a message filter that overrides Talos.

Ask the user to add the sender to the email application’s allow list.

Modify the firewall to allow emails from the domain.

Add the domain into the allow list.

NO.39 An organization wants to use DMARC to improve its brand reputation by leveraging DNS records.
Which two email authentication mechanisms are utilized during this process? (Choose two.)

SPF

DSTP

DKIM

TLS

PKI

NO.40 When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

30 seconds

90 seconds

60 seconds

120 seconds

NO.41 Email encryption is configured on a Cisco ESA that uses CRES.
Which action is taken on a message when CRES is unavailable?

It is requeued.

It is sent in clear text.

It is dropped and an error message is sent to the sender.

It is encrypted by a Cisco encryption appliance.

NO.42 Which process is skipped when an email is received from safedomain.com, which is on the safelist?

message filter

antivirus scanning

outbreak filter

antispam scanning

NO.43 An administrator is trying to enable centralized PVO but receives the error, “Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level.” What is the cause of this error?

Content filters are configured at the machine-level on esa1.

DLP is configured at the cluster-level on esa2.

DLP is configured at the domain-level on esa1.

DLP is not configured on host1.

NO.44 Which two query types are available when an LDAP profile is configured? (Choose two.)

proxy consolidation

user

recursive

group

routing

NO.45 Which two options describe the expected results when centralized policy, virus, and outbreak quarantines are disabled on the Cisco Email Security Appliance? (Choose two.)

The Cisco ESA must be rebooted.

New messages sent to the quarantine are immediately sent to local quarantines

The Cisco ESA stops accepting new messages.

Local quarantines are enabled automatically.

The quarantine process must be restarted.

NO.46 Which two factors must be considered when message filter processing is configured? (Choose two.)

message-filter order

lateral processing

structure of the combined packet

mail policies

MIME structure of the message

NO.47 Which two components must be configured to perform DLP scanning? (Choose two.)

Add a DLP policy on the Incoming Mail Policy.

Add a DLP policy to the DLP Policy Manager.

Enable a DLP policy on the Outgoing Mail Policy.

Enable a DLP policy on the DLP Policy Customizations.

Add a DLP policy to the Outgoing Content Filter.

NO.48 Which feature must be configured before an administrator can use the outbreak filter for nonviral threats?

quarantine threat level

antispam

data loss prevention

antivirus

NO.49 Refer to the exhibit. How should this configuration be modified to stop delivering Zero Day malware attacks?

Change Unscannable Action from Deliver As Is to Quarantine.

Change File Analysis Pending action from Deliver As Is to Quarantine.

Configure mailbox auto-remediation.

Apply Prepend on Modify Message Subject under Malware Attachments.

NO.50 Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.

NO.51 Which two features are applied to either incoming or outgoing mail policies? (Choose two.)

Indication of Compromise

application filtering

outbreak filters

sender reputation filtering

antivirus

NO.52 Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?

Set up the interface group with the flag.

Issue the altsrchost command.

Map the envelope sender address to the host.

Apply a filter on the message.

NO.53 When email authentication is configured on Cisco ESA, which two key types should be selected on the signing profile? (Choose two.)

DKIM

Public Keys

Domain Keys

Symmetric Keys

Private Keys

NO.54

Refer to the exhibit. What is the correct order of commands to set filter 2 to active?

filters-> edit-> 2-> Active

filters-> modify-> All-> Active

filters-> detail-> 2-> 1

filters-> set-> 2-> 1

NO.55 Which two features of Cisco Email Security are added to a Sender Group to protect an organization against email threats? (Choose two.)

NetFlow

geolocation-based filtering

heuristic-based filtering

senderbase reputation filtering

content disarm and reconstruction

NO.56 An analyst creates a new content dictionary to use with Forged Email Detection.
Which entry will be added into the dictionary?

mycompany.com

Alpha Beta

^Alpha Beta$

[email protected]

NO.57 An engineer is tasked with reviewing mail logs to confirm that messages sent from domain abc.com are passing SPF verification and being accepted by the Cisco ESA. The engineer notices that SPF verification is not being performed and that SPF is not being referenced in the logs for messages sent from domain abc.com.
Why is the verification not working properly?

SPF verification is disabled in the Recipient Access Table.

SPF verification is disabled on the Mail Flow Policy.

The SPF conformance level is set to SIDF compatible on the Mail Flow Policy.

An SPF verification Content Filter has not been created.

NO.58 Which default port is used by the Cisco ESA to quarantine the message on the Cisco Security Management Appliance?

port 25fTCP

port110/TCP

port443/TCP

port 6025/TCP

port4766/UDP