Free 300-720 Exam Braindumps
Securing Email with Cisco Email Security Appliance (300-720 SESA) Questions 36–40 (page: 9)

Updated On: 10-Feb-2026

Which attack is mitigated by using Bounce Verification?

  1. spoof
  2. denial of service
  3. eavesdropping
  4. smurf

Answer(s): B

Explanation:

Bounce Verification is a feature that mitigates denial of service attacks on Cisco ESA. A denial of service attack is an attempt to overwhelm a system or network with excessive traffic or requests, rendering it unavailable or slow for legitimate users. Bounce Verification prevents Cisco ESA from accepting bounce messages that are not generated by itself or by trusted hosts, reducing the load on the system and preventing backscatter spam.


Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 5-8.

https://www.networkworld.com/article/2305394/ironport-adds-bounce-back- verification-for-e- mail.html



When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)

  1. redirect
  2. return
  3. drop
  4. delay
  5. abandon

Answer(s): A,D

Explanation:

The Outbreak Filters feature uses three tactics to protect your users from outbreaks:
Delay.
Redirect.
Modify.

https://www.cisco.com/c/en/us/td/docs/security/esa/esa12- 0/user_guide/b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01110.html



Which two features are applied to either incoming or outgoing mail policies? (Choose two.)

  1. Indication of Compromise
  2. application filtering
  3. outbreak filters
  4. sender reputation filtering
  5. antivirus

Answer(s): C,E

Explanation:

Outbreak filters and antivirus are two features that can be applied to either incoming or outgoing mail policies on Cisco ESA. Outbreak filters allow Cisco ESA to detect and block messages that contain new or emerging email threats, such as viruses, worms, phishing, or spam, by using real-time updates from Talos intelligence. Antivirus allows Cisco ESA to scan messages for known viruses and malware using one or two antivirus engines (Sophos and McAfee).


Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 6-16 and page 7-2.
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html



What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?

  1. provisioned email encryption profile
  2. message encryption from a content filter that select "Message Encryption" over TLS
  3. message encryption from the mail flow policies with "CRES" selected
  4. content filter to forward the email to the Cisco Registered Envelope server

Answer(s): A

Explanation:

To allow the Cisco ESA to encrypt an email using the CRES (Cisco Registered Envelope Service), a provisioned email encryption profile must be configured on Cisco ESA. A provisioned email encryption profile is a type of encryption profile that specifies how messages are encrypted using CRES, such as the encryption key strength, the notification options, the branding settings, etc.


Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 12-4.



Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)

  1. load balancing
  2. SLA monitor
  3. active-standby
  4. failover
  5. active-active

Answer(s): A,D

Explanation:

Load balancing and failover are two configurations that can be used on multiple LDAP servers to connect with Cisco ESA. Load balancing means that Cisco ESA will distribute the LDAP queries among the available LDAP servers in a round-robin fashion, improving the performance and efficiency of the LDAP queries. Failover means that Cisco ESA will switch to another LDAP server if the current one is unavailable or unresponsive, ensuring the continuity and reliability of the LDAP queries.


Reference:

User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway, page 10-8.

You can enter multiple host names to configure the LDAP servers for failover or load-balancing.
Separate multiple entries with commas.

https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/sma_user_guide/ b_SMA_Admin_Guide_ces_11/b_SMA_Admin_Guide_chapter_01010.html



Viewing page 9 of 31
Viewing questions 41 - 45 out of 214 questions


Post your Comments and Discuss Cisco 300-720 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!