QUESTION: 65

An engineer is testing mail flow on a new Cisco ESA and notices that messages for domain abc.com are stuck in the delivery queue. Upon further investigation, the engineer notices that the messages pending delivery are destined for 192.168.1.11, when they should instead be routed to 192.168.1.10.

What configuration change needed to address this issue?

Add an address list for domain abc.com.
Modify Destination Controls entry for the domain abc.com.
Modify the SMTP route for the domain and change the IP address to 192.168.1.10.
Modify the Routing Tables and add a route for IP address to 192.168.1.10.

Answer(s): C

Reference:

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118136- qanda-esa-00.html

You can use the SMTP route feature on Cisco ESA to specify how messages for a specific domain are routed to their destination. You can modify the SMTP route for the domain abc.com and change the IP address to 192.168.1.10 to ensure that messages are delivered correctly3. Reference = Securing Email with Cisco Email Security Appliance (SESA) v3.1

Reveal Solution Next Question

QUESTION: 66

Refer to the exhibit. An engineer is trying to connect to a Cisco ESA using SSH and has been unsuccessful. Upon further inspection, the engineer notices that there is a loss of connectivity to the neighboring switch.

Which connection method should be used to determine the configuration issue?

Telnet
HTTPS
Ethernet
serial

Answer(s): D

Explanation:

Serial connection is a method that should be used to determine the configuration issue when there is a loss of connectivity to the neighboring switch. Serial connection allows the engineer to access the Cisco ESA console port using a serial cable and a terminal emulator, such as PuTTY or HyperTerminal, without relying on the network connectivity.
The other options are not valid methods to determine the configuration issue when there is a loss of connectivity to the neighboring switch, because they require network connectivity to work.

Reference:

Cisco Email Security Appliance C690 Quickstart Guide, page 2.

Reveal Solution Next Question

QUESTION: 67

Refer to the exhibit. How should this configuration be modified to stop delivering Zero Day malware attacks?

Change Unscannable Action from Deliver As Is to Quarantine.
Change File Analysis Pending action from Deliver As Is to Quarantine.
Configure mailbox auto-remediation.
Apply Prepend on Modify Message Subject under Malware Attachments.

Answer(s): B

Explanation:

Overview of File Reputation Filtering and File Analysis:

Advanced Malware Protection protects against zero-day and targeted file-based threats in email attachments by:

-Obtaining the reputation of known files.
-Analyzing behavior of certain files that are not yet known to the reputation service. -Continuously evaluating emerging threats as new information becomes available, and notifying you about files that are determined to be threats after they have entered your network. -This feature is available for incoming messages and outgoing messages.

Referece:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11- 1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_010000.html?bookSearch =true

Reveal Solution Next Question

QUESTION: 68

Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?

Set up the interface group with the flag.
Issue the altsrchost command.
Map the envelope sender address to the host.
Apply a filter on the message.

Answer(s): D

Explanation:

A filter is a method that enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way. A filter is a rule that allows Cisco ESA to perform actions on messages based on predefined or custom conditions, such as headers, envelope, body, attachments, etc.
To deliver a flagged message to a specific virtual gateway address using a filter, the engineer can create a content filter or message filter that matches the flag condition and applies an action of "deliver via alternate host" with the virtual gateway address as the parameter.

The other options are not methods that enable an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way, because they have more limitations or requirements than using a filter.

Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 8-3 and page 8-7.

Reveal Solution Next Question

Free 300-720 Exam Braindumps (page: 17)

QUESTION: 65

Reference:

QUESTION: 66

Explanation:

Reference:

QUESTION: 67

Explanation:

QUESTION: 68

Explanation:

Reference: