300-720: Securing Email with Cisco Email Security Appliance

Which SMTP extension does Cisco ESA support for email security?

ETRN
UTF8SMTP
PIPELINING
STARTTLS

Correct answer: D

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011000.html

Which feature utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco ESA?

SenderBase Reputation Filtering
Connection Reputation Filtering
Talos Reputation Filtering
SpamCop Reputation Filtering

Correct answer: A

When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?

Enabling the End-User Safelist/Blocklist feature
Spam Quarantine External Authentication Query
Spam Quarantine End-User Authentication Query
Spam Quarantine Alias Consolidation Query

Correct answer: C

Explanation:

Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118692-configure-esa-00.html

Which benefit does enabling external spam quarantine on Cisco SMA provide?

ability to back up spam quarantine from multiple Cisco ESAs to one central console
access to the spam quarantine interface on which a user can release, duplicate, or delete
ability to scan messages by using two engines to increase a catch rate
ability to consolidate spam quarantine data from multiple Cisco ESA to one central console

Correct answer: D

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-0/user_guide/b_SMA_Admin_Guide/b_SMA_Admin_Guide_chapter_010101.html

When email authentication is configured on Cisco ESA, which two key types should be selected on the signing profile? (Choose two.)

DKIM
Public Keys
Domain Keys
Symmetric Keys
Private Keys

Correct answer: AC

Explanation:

Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213939-esa-configure-dkim-signing.html

What are two phases of the Cisco ESA email pipeline? (Choose two.)

reject
workqueue
action
delivery
quarantine

Correct answer: BD

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-1/user_guide/b_ESA_Admin_Guide_12_1/b_ESA_Admin_Guide_12_1_chapter_011.pdf (p.1)

Which two action types are performed by Cisco ESA message filters? (Choose two.)

non-final actions
filter actions
discard actions
final actions
quarantine actions

Correct answer: AD

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html

Which setting affects the aggressiveness of spam detection?

protection level
spam threshold
spam timeout
maximum depth of recursion scan

Correct answer: B

Explanation:

Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118220-technote-esa-00.html

What is the order of virus scanning when multilayer antivirus scanning is configured?

The default engine scans for viruses first and the McAfee engine scans for viruses second.
The Sophos engine scans for viruses first and the McAfee engine scans for viruses second.
The McAfee engine scans for viruses first and the default engine scans for viruses second.
The McAfee engine scans for viruses first and the Sophos engine scans for viruses second.

Correct answer: C

Explanation:

If you configure multi-layer anti-virus scanning, the Cisco appliance performs virus scanning with the McAfee engine first and the Sophos engine second. It scans messages using both engines, unless the McAfee engine detects a virus. If the McAfee engine detects a virus, the Cisco appliance performs the anti-virus actions (repairing, quarantining, etc.) defined for the mail policy.Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html

If you configure multi-layer anti-virus scanning, the Cisco appliance performs virus scanning with the McAfee engine first and the Sophos engine second. It scans messages using both engines, unless the McAfee engine detects a virus. If the McAfee engine detects a virus, the Cisco appliance performs the anti-virus actions (repairing, quarantining, etc.) defined for the mail policy.

Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html

Which antispam feature is utilized to give end users control to allow emails that are spam to be delivered to their inbox, overriding any spam verdict and action on the Cisco ESA?

end user allow list
end user spam quarantine access
end user passthrough list
end user safelist

Correct answer: B

Explanation:

Reference: https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/esa_user_guide_11-1/b_ESA_Admin_Guide_ces_11_1/b_ESA_Admin_Guide_chapter_011111.pdf