QUESTION: 21

Email encryption is configured on a Cisco ESA that uses CRES.

Which action is taken on a message when CRES is unavailable?

It is requeued.
It is sent in clear text.
It is dropped and an error message is sent to the sender.
It is encrypted by a Cisco encryption appliance.

Answer(s): A

Explanation:

When CRES (Cisco Registered Envelope Service) is unavailable, Cisco ESA will requeue the message and attempt to resend it later, until the maximum number of retries or the maximum age of the message is reached. The message will not be sent in clear text, dropped, or encrypted by another appliance.

Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 12-8.

Show Answer Next Question

QUESTION: 22

Which two features of Cisco Email Security are added to a Sender Group to protect an organization against email threats? (Choose two.)

NetFlow
geolocation-based filtering
heuristic-based filtering
senderbase reputation filtering
content disarm and reconstruction

Answer(s): B,D

Explanation:

Geolocation-based filtering and senderbase reputation filtering are two features of Cisco Email Security that can be added to a Sender Group to protect an organization against email threats. Geolocation-based filtering allows Cisco ESA to accept or reject connections from email servers based on their geographic location, such as country or continent. Senderbase reputation filtering allows Cisco ESA to reject or throttle connections from email servers based on their reputation score, which is calculated by Talos using sensor information from various sources.

Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 5-4 and page 6-2.

Show Answer Next Question

QUESTION: 23

Which two steps configure Forged Email Detection? (Choose two.)

Configure a content dictionary with executive email addresses.
Configure a filter to use the Forged Email Detection rule and dictionary.
Configure a filter to check the Header From value against the Forged Email Detection dictionary.
Enable Forged Email Detection on the Security Services page.
Configure a content dictionary with friendly names.

Answer(s): B,E

Explanation:

Forged Email Detection is a feature that allows Cisco ESA to detect and block messages that spoof the display names of internal senders in the From header, such as executives or managers, to trick recipients into opening malicious or fraudulent emails. To configure this feature, two steps are required:
Configure a content dictionary with friendly names of internal senders that should not appear in the From header of external messages, such as Alpha Beta or John Smith. Configure a filter to use the Forged Email Detection rule and dictionary, which will compare the display name in the From header of incoming messages with the entries in the content dictionary, and apply the configured action if a match is found.

Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 9-8.

Show Answer Next Question

QUESTION: 24

What is the default behavior of any listener for TLS communication?

preferred-verify
off
preferred
required

Answer(s): B

Explanation:

The default behavior of any listener for TLS communication is B. off. This means that TLS is not allowed for incoming connections to the listener and connections to the listener do not require encrypted Simple Mail Transfer Protocol (SMTP) conversations. This is stated in the web search result 1. To enable TLS for a listener, you need to configure the Use TLS option in the mail flow policy settings for the listener on the Mail Policies > HAT Overview page1. You can choose from three different settings for TLS: No, Preferred, or Required1.

Reference:

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118954- config-esa- 00.html

Show Answer Next Question

Free Cisco® 300-720 Exam Questions (page: 17)

QUESTION: 21

Explanation:

Reference:

QUESTION: 22

Explanation:

Reference:

QUESTION: 23

Explanation:

Reference:

QUESTION: 24

Explanation:

Reference:

300-720 Exam Discussions & Posts