Free 300-720 Exam Braindumps
Securing Email with Cisco Email Security Appliance (300-720 SESA) Questions 51–55 (page: 12)

Updated On: 10-Feb-2026

What is a benefit of implementing URL filtering on the Cisco ESA?

  1. removes threats from malicious URLs
  2. blacklists spam
  3. provides URL reputation protection
  4. enhances reputation against malicious URLs

Answer(s): C

Explanation:

A benefit of implementing URL filtering on the ESA is that it provides URL reputation protection. URL filtering uses SenderBase, a web-based service that collects information about URLs and domains from various sources, to assign a reputation score and a category to each URL. Based on these attributes, you can configure content or message filters to take actions on messages containing malicious or undesirable URLs.


Reference:

User Guide for AsyncOS 12.0 for Cisco Email Security Appliances - GD (General Deployment), Chapter: Protecting Against Malicious or Undesirable URLs, Section: URL-Related Protections and Controls
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775- technote- esa-00.html



Refer to the exhibit.



Which SPF record is valid for mycompany.com?

  1. v=spf1 a mx ip4:199.209.31.2 -all
  2. v=spf1 a mx ip4:10.1.10.23 -all
  3. v=spf1 a mx ip4:199.209.31.21 -all
  4. v=spf1 a mx ip4:172.16.18.230 -all

Answer(s): C

Explanation:

The SPF record for mycompany.com is shown in the exhibit as:
v=spf1 a mx ip4:199.209.31.21 -all
This means that the domain mycompany.com authorizes the following sources to send email on its behalf:
The A record of mycompany.com, which resolves to 199.209.31.21 The MX record of mycompany.com, which points to mail.mycompany.com, which also resolves to 199.209.31.21
The IP address 199.209.31.21
The -all qualifier means that any other source is not authorized and should be rejected.

Therefore, the correct answer is C.


Reference:

SPF Record Syntax
Define your SPF record--Basic setup



What is a valid content filter action?

  1. decrypt on delivery
  2. quarantine
  3. skip antispam
  4. archive

Answer(s): B

Explanation:

A content filter action is an operation that Cisco ESA performs on a message if it matches the conditions of a content filter rule, such as headers, envelope, body, attachments, etc. Quarantine is a valid content filter action that allows Cisco ESA to store the message in a quarantine area for further review or release by an administrator or an end user. The other options are not valid content filter actions on Cisco ESA.


Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 8-3 and page 8-7.

https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01010.html#con_1158022



When virtual gateways are configured, which two distinct attributes are allocated to each virtual gateway address? (Choose two.)

  1. domain
  2. IP address
  3. DNS server address
  4. DHCP server address
  5. external spam quarantine

Answer(s): A,B

Explanation:

Virtual gateways are a feature that allows Cisco ESA to host multiple email domains on a single physical interface, using different IP addresses and hostnames for each domain.
When virtual gateways are configured, two distinct attributes are allocated to each virtual gateway address:
Domain, which is the email domain name that is associated with the virtual gateway address, such as mycompany.com or mydomain.com.

IP address, which is the IPv4 or IPv6 address that is assigned to the virtual gateway address, such as 199.209.31.X or 2001:db8::X.
The other options are not attributes that are allocated to each virtual gateway address on Cisco ESA.


Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 5-14 and page 5-15.

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118542- qa-esa- 00.html



When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

  1. 30 seconds
  2. 90 seconds
  3. 60 seconds
  4. 120 seconds

Answer(s): C

Explanation:

When Cisco ESA is configured to perform antivirus scanning, the default timeout value is 60 seconds, which means that Cisco ESA will wait for 60 seconds for the antivirus engine to scan a message before applying the configured action for unscannable messages, such as deliver, drop, or quarantine.


Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 7-3.

https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html



Viewing page 12 of 31
Viewing questions 56 - 60 out of 214 questions


Post your Comments and Discuss Cisco 300-720 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!