A recent engine update was pulled down for graymail and has caused the service to start crashing. It is critical to fix this as quickly as possible.What must be done to address this issue?
Answer(s): A
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11- 1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_0100010.html#task _9F07A032042F48C6AEDB69D325CD3C5FTo address this issue, the administrator should roll back to a previous version of the engine from the Services Overview page on Cisco ESA. This will restore the functionality of graymail service and prevent it from crashing.The Services Overview page allows the administrator to view and manage various services on Cisco ESA, such as antivirus, outbreak filters, graymail, etc., and perform actions such as enable/disable, update, or roll back.The other options are not valid solutions to address this issue, because they do not allow the administrator to roll back to a previous version of the engine for graymail service.User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 6-18 and page 6-19.
Refer to the exhibit. An engineer needs to change the existing Forged Email Detection message filter so that it references a newly created dictionary named `Executives'.What should be done to accomplish this task?
Answer(s): D
https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/BRKSEC-2240.pdf
An administrator has created a content filter to quarantine all messages that result in an SPF hardfail to review the messages and determine whether a trusted partner has accidentally misconfigured the DNS settings. The administrator sets the policy quarantine to release the messages after 24 hours, allowing time to review while not interrupting business.Which additional option should be used to help the end users be aware of the elevated risk of interacting with these messages?
Modify Subject is an additional option that should be used to help the end users be aware of the elevated risk of interacting with these messages. Modify Subject allows the administrator to add a prefix or suffix to the message subject, such as "[SPF Fail]", to indicate that the message has failed the SPF verification and may be fraudulent or spoofed. The other options are not valid additional options to help the end users be aware of the elevated risk of interacting with these messages, because they do not affect the message subject or provide any warning to the end users.
User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 8-7 and page 8-8.
A company has deployed a new mandate that requires all emails sent externally from the SalesDepartment to be scanned by DLP for PCI-DSS compliance. A new DLP policy has been created on the Cisco ESA and needs to be assigned to a mail policy named `Sales' that has yet to be created.Which mail policy should be created to accomplish this task?
Outgoing Mail Policy is a mail policy that should be created to accomplish this task. Outgoing Mail Policy is a set of rules that determine how outgoing messages are processed by Cisco ESA, including whether to apply DLP scanning or not.To create an Outgoing Mail Policy named `Sales' and assign a DLP policy to it, the administrator can follow these steps:Select Mail Policies > Outgoing Mail Policies and click Add Policy.Enter `Sales' as the policy name and click Submit.Select `Sales' from the list of policies and click Edit Settings. Under Data Loss Prevention, select Enable Data Loss Prevention Scanning and choose the DLP policy from the drop-down menu.Click Submit.The other options are not valid mail policies to accomplish this task, because they do not apply to outgoing messages or DLP scanning.
User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 9-2 and page 9-4.
DRAG DROP (Drag and Drop is not supported)An administrator must ensure that emails sent from cisco_123@externally.com are routed through an alternate virtual gateway. Drag and drop the snippet from the bottom onto the blank in the graphic to finish the message filter syntax. Not all snippets are used.
Post your Comments and Discuss Cisco 300-720 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 300-720 content, but please register or login to continue.