Cisco 300-720 SESA Exam Questions Instant Access

Question 1

Refer to the exhibit.

Refer to the exhibit. An engineer needs to change the existing Forged Email Detection message filter so that it references a newly created dictionary named 'Executives'.

What should be done to accomplish this task?

AChange 'from' to 'Executives'.

BChange 'TESF to 'Executives'.

CChange fed' to 'Executives'.

DChange 'support' to 'Executives'.

Answer : D

https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/BRKSEC-2240.pdf

Question 2

A security engineer wants to ensure that legitimate emails from info@partners.com are not quarantined as spam in Cisco Secure Email. Which action must be taken to meet this requirement?

ARemove the domain from the Wocklist.

BAdd the domain to the allowlist.

CAdd the domain to the safelist.

DAdd all partners.com email addresses to the allowlist.

Answer : C

Question 3

An email administrator must configure DLP policies on the Cisco Secure Email Gateway. The DLP policies must be added to the default outgoing mail policy. How is this task accomplished?

ACreate a recipient group for the DLP policies and apply it to the default outgoing mail policy.

BRemove DLP policies with the same severity level prior to leveraging the DLP Assessment Wizard

CCreate a classifier to match specific content within a predefined DLP policy template

DRemove all existing DLP policies prior to leveraging the DLP Assessment Wizard.

Answer : D

Question 4

What is the function of authenticating SMTP sessions using client certificates?

AUsers must configure a mail client to send messages through a secure SSL connection and accept a server certificate from the appliance.

BIf the certificate is valid, the Secure Email Gateway allows an SMTP connection from the mail client over TLS.

CIf the Secure Email Gateway is configured to require users to provide a certificate when sending mail, no exceptions are allowed for any users.

DThe Secure Email Gateway requests a client certificate from a user's mail client during connection to the appliance.

Answer : D

Question 5

An engineer is tasked with reviewing mail logs to confirm that messages sent from domain abc.com are passing SPF verification and being accepted by the Cisco ESA. The engineer notices that SPF verification is not being performed and that SPF is not being referenced in the logs for messages sent from domain abc.com.

Why is the verification not working properly?

ASPF verification is disabled in the Recipient Access Table.

BSPF verification is disabled on the Mail Flow Policy.

CThe SPF conformance level is set to SIDF compatible on the Mail Flow Policy.

DAn SPF verification Content Filter has not been created.

Answer : B

SPF verification is a feature that allows Cisco ESA to verify the authenticity of the sender's domain by checking the sender's IP address against a DNS record published by the domain owner. An SPF record is a TXT record that specifies the authorized IP addresses or hosts for sending emails from a domain, using a syntax of qualifiers, mechanisms, and modifiers.

The reason why the verification is not working properly is that SPF verification is disabled on the mail flow policy that applies to the messages sent from domain abc.com. A mail flow policy is a set of rules that determine how incoming or outgoing messages are processed by Cisco ESA, including whether to enable SPF verification or not.

To enable SPF verification on the mail flow policy, the administrator can follow these steps:

Select Mail Policies > Mail Flow Policies and click Edit Settings for the mail flow policy that applies to the messages sent from domain abc.com.

Under Sender Authentication, select Enable SPF Verification and choose an SPF conformance level from the drop-down menu.

Click Submit.

The other options are not valid reasons why the verification is not working properly, because they do not affect SPF verification on the mail flow policy.

Question 6

When URL logging is configured on a Cisco ESA, which feature must be enabled first?

Aantivirus

Bantispam

Cvirus outbreak filter

Dsenderbase reputation filter

Answer : C

Enabling Logging of URLs and Message Tracking Details for URLs

Logging of URL-related logs, and display of this information in Message Tracking details, is disabled by default. This includes the logs for the following events:

Category of any URL in the message matches the URL category filters

Reputation score of any URL in the message matches URL reputation filters

Outbreak Filter rewrites any URL in the message

To enable logging of these events, use the outbreakconfig command in the command-line interface (CLI).

https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01110.html?bookSearch=true

Question 7

Which of the following two steps are required to enable Cisco SecureX integration on a Cisco Secure Email Gateway appliance? (Choose two.)

APaste in the Registration Token generated from the Smart Licensing Account

BEnable the Threat Response service under Network>Cloud Service Settings.

CSelect the correct Threat Response Server based on your region.

DPaste in the Registration Token generated from the Security Services Exchange.

EEnable the Security Services Exchange service under Network>Cloud Service Settings

Answer : B, C

one of the methods to enable Cisco SecureX integration on a Cisco Secure Email Gateway appliance is to use the Threat Response service1.This service allows the appliance to send telemetry data to the SecureX cloud and provide visibility and response capabilities across multiple security products1.To use this service, the administrator needs to perform the following steps1:

Enable the Threat Response service: The administrator needs to go to Network > Cloud Service Settings and enable the Threat Response service.This will generate a registration token that can be used to register the appliance with SecureX1.

Select the correct Threat Response Server: The administrator needs to select the appropriate Threat Response server based on the region where the appliance is located.The available regions are North America, Europe, and Asia Pacific1.

Cisco Securing Email with Cisco Secure Email Gateway 300-720 SESA Exam Questions