Cisco 300-720 SESA Exam Questions Instant Access

Question 1

An administrator notices that incoming emails with certain attachments do not get delivered to all recipients when the emails have multiple recipients in different domains like cisco.com and test.com. The same emails when sent only to recipients in cisco.com are delivered properly. How must the Cisco Secure Email Gateway be configured to avoid this behavior?

AModify mail policies for cisco.com to ensure that emails are not dropped.

BModify mail policies so email recipients do not match multiple policies.

CModify DLP configuration to ensure that all attachments are permitted for test.com.

DModify DLP configuration to exempt DLP scanning for messages sent to test.com domain

Answer : B

By modifying the mail policies, specifically the recipient matching criteria, you can ensure that email recipients do not match multiple policies simultaneously. When recipients in the email message belong to different domains (e.g., cisco.com and test.com), it can result in multiple policies being triggered simultaneously, leading to inconsistent delivery of emails with attachments.

DLP is for outgoing mail only and not relevant to incoming mail.

Question 2

Refer to the exhibit.

Refer to the exhibit. An engineer is trying to connect to a Cisco ESA using SSH and has been unsuccessful. Upon further inspection, the engineer notices that there is a loss of connectivity to the neighboring switch.

Which connection method should be used to determine the configuration issue?

ATelnet

BHTTPS

CEthernet

Dserial

Answer : D

Serial connection is a method that should be used to determine the configuration issue when there is a loss of connectivity to the neighboring switch. Serial connection allows the engineer to access the Cisco ESA console port using a serial cable and a terminal emulator, such as PuTTY or HyperTerminal, without relying on the network connectivity.

The other options are not valid methods to determine the configuration issue when there is a loss of connectivity to the neighboring switch, because they require network connectivity to work.

Question 3

Which of the following two steps are required to enable Cisco SecureX integration on a Cisco Secure Email Gateway appliance? (Choose two.)

APaste in the Registration Token generated from the Smart Licensing Account

BEnable the Threat Response service under Network>Cloud Service Settings.

CSelect the correct Threat Response Server based on your region.

DPaste in the Registration Token generated from the Security Services Exchange.

EEnable the Security Services Exchange service under Network>Cloud Service Settings

Answer : B, C

one of the methods to enable Cisco SecureX integration on a Cisco Secure Email Gateway appliance is to use the Threat Response service1.This service allows the appliance to send telemetry data to the SecureX cloud and provide visibility and response capabilities across multiple security products1.To use this service, the administrator needs to perform the following steps1:

Enable the Threat Response service: The administrator needs to go to Network > Cloud Service Settings and enable the Threat Response service.This will generate a registration token that can be used to register the appliance with SecureX1.

Select the correct Threat Response Server: The administrator needs to select the appropriate Threat Response server based on the region where the appliance is located.The available regions are North America, Europe, and Asia Pacific1.

Question 4

An engineer must configure a mail policy for all incoming email that contains a Microsoft Excel attachment. All such email must be quarantined without any exception. After the incoming mail policy is created, which action must be taken next to meet the requirement?

ASet the quarantine threat level threshold to 1.

BConfigure the Outgoing Content Filters settings.

CSet the quarantine threat level threshold to 5.

DCreate an incoming content filter to match required attachments.

Answer : D

Question 5

What is the purpose of checking the CRL during SMTP authentication on a Cisco Secure Email Gateway?

AValidate the date to check if the certificate is still valid

BCheck if the certificate is not revoked.

CConfirm that corresponding CA is present

DVerify the common name matches user ID

Answer : B

The purpose of checking the Certificate Revocation List (CRL) during SMTP authentication on a Cisco Secure Email Gateway is to check if the certificate is not revoked by the issuing Certificate Authority (CA). A revoked certificate means that it is no longer valid and should not be trusted. Reference = [User Guide for AsyncOS 12.0 for Cisco Email Security Appliances - GD (General Deployment) - Configuring SMTP Authentication [Cisco Secure Email Gateway] - Cisco]

Question 6

Refer to the exhibit.

Refer to the exhibit. A security engineer must configure a Cisco Secure Email Gateway to ensure that encryption is enabled and the configured profile is provisioned. Which command must be used?

Asetup

Bcheck encryption

Cprovision

Dprofiles

Answer : C

Question 7

An engineer must configure Directory Harvest Attack Prevention for SMTP in Cisco Secure Email Gateway. This error message must be sent when the listener receives more than 50 invalid

recipients per hour.

*500 - Too many requests

*Max. Invalid Recipients Per Hour was set to 50 already.

Which two actions must be taken next to set maximum invalid recipients per hour to meet the requirement? (Choose two.)

ACreate Max. Recipients Per Hour Code to 500.

BApply Max. Recipients Per Hour Text to 500 - Too many requests.

CConfigure Max. Recipients Per Hour Code to 500.

DSet Max. Recipients Per Hour Text to Too many requests.

EImplement Max. Recipients Per Hour Text to 500 - Too many requests.

Answer : C, E

Cisco Securing Email with Cisco Secure Email Gateway 300-720 SESA Exam Questions