Free Securing Email with Cisco Email Security Appliance (300-720 SESA) Exam 300-720 Exam Practice Test

An engineer is configuring a Cisco ESA for the first time and needs to ensure that any email traffic coming from the internal SMTP servers is relayed out through the Cisco ESA and is tied to the Outgoing Mail Policies.Which Mail Flow Policy setting should be modified to accomplish this goal?

• Exception List
• Connection Behavior
• Bounce Detection Signing
• Reverse Connection Verification

What is a category for classifying graymail?

• Malicious
• Marketing
• Spam
• Priority

An administrator notices that the Cisco Secure Email Gateway delivery queue on an appliance is consistently full. After further investigation, it is determined that the IP addresses currently in use by appliance are being rate-limited by some destinations. The administrator creates a new interface with an additional IP address using virtual gateway technology, but the issue is not solved Which configuration change resolves the issue?

• Use the CLI command altsrchost to set the new interface as the source IP address for all mail.
• Use the CLI command loadbalance auto to enable mail delivery over all interfaces.
• Use the CLI command alt-src-host to set the new interface as a possible delivery candidate.
• Use the CLI command deliveryconfig to set the new interface as the primary interface for mail delivery

An administrator identifies that, over the past week, the Cisco ESA is receiving many emails from certain senders and domains which are being consistently quarantined. The administrator wants to ensure that these senders and domain are unable to send anymore emails.Which feature on Cisco ESA should be used to achieve this?

• incoming mail policies
• safelist
• blocklist
• S/MIME Sending Profile

Which global setting is configured under Cisco ESA Scan Behavior?

• minimum attachment size to scan
• attachment scanning timeout
• actions for unscannable messages due to attachment type
• minimum depth of attachment recursion to scan

The CEO sent an email indicating that all emails containing a string of 123ABCDEFGHJ cannot be delivered and must be sent into quarantine for further inspection. Given the requirement, which regular expression should be used to match on that criteria?

• \\D{3}[A-Z]{9}
• \d{3}[A-Z]{9}
• \W{3}[A-Z]{9}
• {3}\d{9}[A-Z]

Which action must be taken before a custom quarantine that is being used can be deleted?

• Delete the quarantine that is assigned to a filter.
• Delete the quarantine that is not assigned to a filter.
• Delete only the unused quarantine.
• Remove the quarantine from the message action of a filter.

A company has recently updated their security policy and now wants to drop all email messages larger than 100 MB coming from external sources. The Cisco Secure Email Gateway is LDAP integrated and all employee accounts are in the group 'Employees'. Which filter rule configuration provides the desired outcome?

• if (mail-from-group == 'Employees') and (body-size > '100M') {drop()}
• if (mail-from-group != 'Employees') and (body-size > 100M) {drop();}
• if (mail-from-group == 'Employees') and (body-size > 100M) {bounce();}
• if ('mail-from-group != Employees') and (body-size > 100M) {drop();}

A Cisco ESA administrator was notified that a user was not receiving emails from a specific domain. After reviewing the mail logs, the sender had a negative sender-based reputation score.What should the administrator do to allow inbound email from that specific domain?

• Create a new inbound mail policy with a message filter that overrides Talos.
• Ask the user to add the sender to the email application's allow list.
• Modify the firewall to allow emails from the domain.
• Add the domain into the allow list.

What occurs when configuring separate incoming mail policies?

• message splintering
• message exceptions
• message detachment
• message aggregation