QUESTION: 53

What is a valid content filter action?

decrypt on delivery
quarantine
skip antispam
archive

Answer(s): B

Explanation:

A content filter action is an operation that Cisco ESA performs on a message if it matches the conditions of a content filter rule, such as headers, envelope, body, attachments, etc. Quarantine is a valid content filter action that allows Cisco ESA to store the message in a quarantine area for further review or release by an administrator or an end user. The other options are not valid content filter actions on Cisco ESA.

Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 8-3 and page 8-7.

https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01010.html#con_1158022

Reveal Solution Next Question

QUESTION: 54

When virtual gateways are configured, which two distinct attributes are allocated to each virtual gateway address? (Choose two.)

domain
IP address
DNS server address
DHCP server address
external spam quarantine

Answer(s): A,B

Explanation:

Virtual gateways are a feature that allows Cisco ESA to host multiple email domains on a single physical interface, using different IP addresses and hostnames for each domain.
When virtual gateways are configured, two distinct attributes are allocated to each virtual gateway address:
Domain, which is the email domain name that is associated with the virtual gateway address, such as mycompany.com or mydomain.com.

IP address, which is the IPv4 or IPv6 address that is assigned to the virtual gateway address, such as 199.209.31.X or 2001:db8::X.
The other options are not attributes that are allocated to each virtual gateway address on Cisco ESA.

Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 5-14 and page 5-15.

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118542- qa-esa- 00.html

Reveal Solution Next Question

QUESTION: 55

When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

30 seconds
90 seconds
60 seconds
120 seconds

Answer(s): C

Explanation:

When Cisco ESA is configured to perform antivirus scanning, the default timeout value is 60 seconds, which means that Cisco ESA will wait for 60 seconds for the antivirus engine to scan a message before applying the configured action for unscannable messages, such as deliver, drop, or quarantine.

Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 7-3.

https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html

Reveal Solution Next Question

QUESTION: 56

Which global setting is configured under Cisco ESA Scan Behavior?

minimum attachment size to scan
attachment scanning timeout
actions for unscannable messages due to attachment type
minimum depth of attachment recursion to scan

Answer(s): C

Explanation:

The global setting that is configured under Cisco ESA Scan Behavior is the actions for unscannable messages due to attachment type. This setting allows the administrator to specify what action to take when a message contains an attachment that cannot be scanned by the appliance, such as encrypted or password-protected files. The possible actions are:
Deliver - Deliver the message normally. Drop - Drop the message silently without notifying the sender or recipient. Quarantine - Quarantine the message in a specified policy quarantine. Bounce - Bounce the message back to the sender with a specified reason.

Reference:

Scan Behavior

https://community.cisco.com/t5/email-security/cisco-ironport-esa-security-services-scan- behavior- impact-on-av/td-p/3923243

Reveal Solution Next Question

Free 300-720 Exam Braindumps (page: 14)

QUESTION: 53

Explanation:

Reference:

QUESTION: 54

Explanation:

Reference:

QUESTION: 55

Explanation:

Reference:

QUESTION: 56

Explanation:

Reference: