BONUS!!! 免費下載Testpdf 300-720考試題庫的完整版：https://drive.google.com/open?id=1Yo5l63g5_0g6vYk5tVHo07-jxypKFS4W
Testpdf是一個你可以完全相信的網站。Testpdf的Cisco技術專家為了讓大家可以學到更加高效率的資料一直致力於各種300-720認證考試的研究，從而開發出了更多的考試資料。只要你使用過一次Testpdf的資料，你就肯定還想用第二次。因為Testpdf不但給你提供最好的資料，而且為你提供最優質的服務。如果你對我們的產品有任何意見都可以隨時提出，因為我們不僅以讓廣大考生輕鬆通過300-720考試為宗旨，更把為大家提供最好的服務作為我們的目標。
Cisco電子郵件安全設備是一種全面的電子郵件安全解決方案，可保護組織免受垃圾郵件，網絡釣魚和惡意軟件等高級電子郵件威脅。它提供了一種多層防禦機制，其中包括反垃圾郵件，防病毒和內容過濾技術。該設備還提供高級功能，例如電子郵件加密，預防數據丟失和電子郵件身份驗證，以確保電子郵件通信的機密性和完整性。通過Cisco 300-720考試表明，個人有能力部署，配置和管理Cisco Email Security Appliance，為其組織提供安全的電子郵件基礎架構。
Cisco 300-720 考試涵蓋與郵件安全相關的各種主題，包括配置和部署 Cisco 郵件安全裝置、管理郵件政策、定義郵件加密，以及防止郵件威脅，例如釣魚、惡意軟體和垃圾郵件。考試測試您識別郵件安全威脅和漏洞的能力，並實施有效的解決方案以緩解它們。
Testpdf提供的資料是Testpdf擁有超過10年經驗的Cisco精英通過研究與實踐而得到的。Testpdf有你們需要的最新最準確的考試資料。Testpdf正是為了你們的成功而存在的，選擇Testpdf就等於選擇成功。如果想顺利通过300-720考试，Testpdf是你不二的选择。
為了準備 Cisco 300-720 認證考試，候選人可以利用各種資源，包括培訓課程、學習材料和練習考試。這些資源將幫助候選人發展其在電子郵件安全方面的知識和技能，並熟悉 Cisco ESA。
問題 #135
An organization wants to use DMARC to improve its brand reputation by leveraging DNS records.
Which two email authentica tion mechanisms are utilized during this process? (Choose two.)
答案：B,E
解題說明：
Reference:
https://www.cisco.com/c/en/us/products/security/what-is-dmarc.html
SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) are two email authentication mechanisms that are utilized during this process. SPF and DKIM allow the domain owner to publish DNS records that specify the authorized IP addresses or hosts for sending emails from that domain and sign the messages with a cryptographic key to prove their authenticity and integrity.
DMARC (Domain-based Message Authentication, Reporting and Conformance) is an email authentication standard that builds on SPF and DKIM and allows the domain owner to publish DNS records that specify how receivers should handle messages that fail SPF or DKIM verification, such as reject, quarantine, or none, and how to report back the results of DMARC validation.
The other options are not valid email authentication mechanisms that are utilized during this process, because they are not part of DMARC standard.
References: [User Guide for AsyncOS 15.0 for Cisco Secure Email Gateway], page 11-2 and page 11-3.
問題 #136
Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)
答案：A,C
解題說明：
Message filters can only be applied to the ESA via command line. So, you will need command line access to the ESA.
Log into the ESA via command line.
Run the following highlighted commands to apply the message filter to the ESA:
ironport.example.com > filters
Choose the operation you want to perform:
- NEW - Create a new filter.
- IMPORT - Import a filter script from a file.
[] > NEW
Enter filter script. Enter ' . ' on its own line to end.
large_spam_no_attachment:
if ((body-size > 2097152) AND NOT (attachment-size > 0)) {
quarantine( " large_spam " );
log-entry( " *****This is a large message with no attachments***** " );
}
1 filters added.
Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213940-esa-using- a- message-filter-to-take-act.html
問題 #137
An engineer is testing mail flow on a new Cisco ESA and notices that messages for domain abc.com are stuck in the delivery queue. Upon further investigation, the engineer notices that the messages pending delivery are destined for 192.168.1.11, when they should instead be routed to 192.168.1.10.
What configuration change needed to address this issue?
答案：A
解題說明：
Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118136-qanda-esa-
00.html
You can use the SMTP route feature on Cisco ESA to specify how messages for a specific domain are routed to their destination. You can modify the SMTP route for the domain abc.com and change the IP address to
192.168.1.10 to ensure that messages a re delivered correctly 3 . References = Securing Email with Cisco Email Security Appliance (SESA) v3.1
問題 #138
What are two components of the graymail management solution? (Choose two.)
答案：A,D
解題說明：
Graymail management uses an integrated graymail scanning engine to identify graymail categories and a cloud-based unsubscribe service to process unsubscribe requests safely for supported messages.
問題 #139
An engineer must configure Cisco Secure Email Gateway to scan all email from the HR department for viruses. The McAfee scanning engine must be used, and a log entry must be added for messages that are marked Unscannable after a timeout of 45 seconds. These configurations were performed already:
- Enable antivirus scanning on the email gateway.
- Create a mail policy for the HR department.
Which two actions must be taken next to meet the requirement? (Choose two.)
答案：D,E
解題說明：
You must set the virus scanning timeout value to 45 seconds to ensure that unscannable messages are identified within that period. Additionally, add an X-IronPort-AV Header in the Message Scanning settings to log messages that are marked as unscannable after a timeout, fulfilling both the scanning and logging requirements.
問題 #140
......
300-720參考資料: https://www.testpdf.net/300-720.html
P.S. Testpdf在Google Drive上分享了免費的、最新的300-720考試題庫：https://drive.google.com/open?id=1Yo5l63g5_0g6vYk5tVHo07-jxypKFS4W