300-720 Online Practice Questions and Answers

DRAG DROP

Drag and drop the Cisco ESA reactions to a possible DLP from the left onto the correct action types on the right.

Select and Place:

An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level."

What is the cause of this error?

A. Content filters are configured at the machine-level on esa1.

B. DLP is configured at the cluster-level on esa2.

C. DLP is configured at the domain-level on esa1.

D. DLP is not configured on host1.

What is a benefit of enabling external SPAM quarantine on Cisco SMA?

A. It provides access to the SPAM quarantine interface on which a user can release, duplicate, or delete.

B. It provides the ability to scan messages by using two engines to increase a catch rate.

C. It provides the ability to consolidate SPAM quarantine data from multiple Cisco ESAs to one central console.

D. It provides the ability to back up SPAM quarantine from multiple Cisco ESAs to one central console.

To comply with a recent audit, an engineer must configure anti-virus message handling options on the incoming mail policies to attach warnings to the subject of an email. What should be configured to meet this requirement for known viral emails?

A. Virus Infected Messages

B. Unscannable Messages

C. Encrypted Messages

D. Positively Identified Messages

A recent engine update was pulled down for graymail and has caused the service to start crashing. It is critical to fix this as quickly as possible. What must be done to address this issue?

A. Roll back to a previous version of the engine from the Services Overview page.

B. Roll back to a previous version of the engine from the System Health page.

C. Download another update from the IMS and Graymail page.

D. Download another update from the Service Updates page.

Users have been complaining of a higher volume of emails containing profanity. The network administrator will need to leverage dictionaries and create specific conditions to reduce the number of inappropriate emails.

Which two filters should be configured to address this? (Choose two.)

A. message

B. spam

C. VOF

D. sender group

E. content

What is a category for classifying graymail?

A. Priority

B. Marketing

C. Malicious

D. Spam

A network administrator has enabled virus scanning with the Sophos antivirus engine and set the "drop infected mail" option on a Cisco ESA; however, end users are still complaining about the large number of phishing emails they receive. What must be done to resolve this problem?

A. Configure Reputation Filtering

B. Configure Content Filtering

C. Configure Outbreak Filtering

D. Change the antivirus engine to McAfee.

The Cisco ESA is processing many messages that are sent to invalid recipients. To reduce this excessive processing, an engineer is preparing to use LDAP for recipient verification. Which two steps are required to accomplish this task? (Choose two.)

A. Configure LDAP server profiles.

B. Enable external LDAP authentication.

C. Configure the LDAP query.

D. Enable LDAP authentication on a listener.

E. Configure incoming mail policy to query LDAP server.

An organization wants to designate help desk personnel to assist with tickets that request the release of messages from the spam quarantine because company policy does not permit end-user quarantine access to employees directly. Which two roles must be used for these personnel to release messages while restricting access to make configuration changes in the Cisco ESA? (Choose two.)

A. Administrator

B. Read-Only Operator

C. Technician

D. Quarantine Administrator

E. Help Desk User