참고: Pass4Test에서 Google Drive로 공유하는 무료, 최신 300-720 시험 문제집이 있습니다: https://drive.google.com/open?id=1wqG8Co0NRvUj9b9AwEF7J4D9CmlhNRzw
Pass4Test의Cisco인증 300-720 덤프는 수많은 시험준비 공부자료 중 가장 믿음직합니다. Pass4Test의 인지도는 업계에 널리 알려져 있습니다. Cisco인증 300-720덤프로Cisco인증 300-720시험을 준비하여 한방에 시험패스한 분이 너무나도 많습니다. Cisco인증 300-720덤프는 실제Cisco인증 300-720시험문제에 초점을 맞추어 제작한 최신버전 덤프로서 시험패스율이 100%에 달합니다.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Email Authentication and Encryption | 15% | - Implement SPF, DKIM, DMARC - Configure encryption features - Secure message delivery and verification |
| Topic 2: Content Filters, Message Filters, and Security Features | 15% | - Configure antivirus scanning engines - Implement outbreak filters and security policies - Design and deploy message filters - Create and manage content dictionaries and text resources - Data Loss Prevention (DLP) configuration |
| Topic 3: Quarantine and Message Management | 20% | - Quarantine reporting and administration - System and user quarantine setup - Manage message release and delivery |
| Topic 4: Administration of Cisco Secure Email Gateway | 15% | - Setup and initial configuration - Configure mail policies and delivery settings - Monitor, log, and troubleshoot operations - Describe architecture and components - Manage system access and authentication |
| Topic 5: LDAP Integration and SMTP Services | 15% | - Configure LDAP servers, queries, and authentication - Integrate with directory services - Control SMTP sessions and connection management - Prevent directory harvest attacks |
| Topic 6: Spam Control, Antispam, and Threat Protection | 20% | - Implement Talos SenderBase and antispam engines - File reputation and file analysis - Bounce verification and attack prevention - URL filtering and malicious link protection - Configure graymail and bulk mail management |
300-720는Cisco의 인증시험입니다.300-720인증시험을 패스하면Cisco인증과 한 발작 더 내디딘 것입니다. 때문에300-720시험의 인기는 날마다 더해갑니다.300-720시험에 응시하는 분들도 날마다 더 많아지고 있습니다. 하지만300-720시험의 통과 율은 아주 낮습니다.300-720인증시험준비중인 여러분은 어떤 자료를 준비하였나요?
질문 # 242
To comply with a recent audit, an engineer must configure anti-virus message handling options on the incoming mail policies to attach warnings to the subject of an email.
What should be configured to meet this requirement for known viral emails?
정답:B
질문 # 243
A network engineer must tighten up the SPAM control policy of an organization due to a recent SPAM attack. In which scenario does enabling regional scanning improve security for this organization?
정답:A
설명:
Enabling regional scanning improves security for this organization when most of the received email originates from a specific region. Regional scanning is a feature that allows Cisco ESA to apply different spam thresholds and actions based on the geographic region of the sender's IP address, using a database of IP addresses and regions.
To enable regional scanning on Cisco ESA, the administrator can follow these steps:
Select Security Services > IronPort Anti-Spam and click Edit Settings.
Under Regional Scanning, select Enable Regional Scanning.
Click Submit.
Select Security Services > IronPort Anti-Spam > Regional Settings and click Add Region.
Choose a region from the drop-down menu, such as Asia Pacific.
Enter a spam threshold and an action for that region, such as 80 and Drop.
Click Submit.
질문 # 244
Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.
정답:
설명:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/ b_ESA_Admin_Guide_11_1_chapter_010101.html
질문 # 245
A network administrator notices that there are a high number of queries to the LDAP server. The mail logs show an entry "550 Too many invalid recipients | Connection closed by foreign host." Which feature must be used to address this?
정답:A
설명:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/b_ESA_Admin_Guide_12_0
/b_ESA_Admi n_Guide_12_0_chapter_011010.html
DHAP (Directory Harvest Attack Prevention) is a feature that must be used to address this issue. DHAP is a mechanism that allows Cisco ESA to prevent directory harvest attacks, which are attempts by spammers or hackers to obtain valid email addresses from an LDAP server by sending messages with random or guessed recipients and checking for bounce messages.
To enable DHAP on Cisco ESA, the network administrator can follow these steps:
Select Network > Listeners and click Edit Settings for the listener that receives incoming messages.
Under SMTP Authentication Settings, select Enable Directory Harvest Attack Prevention.
Enter a value for Maximum Invalid Recipients per Hour, which is the number of invalid recipients that triggers DHAP.
Enter a value for Block Sender for (hours), which is the duration that Cisco ESA blocks messages from senders who exceed the maximum invalid recipients per hour.
Click Submit.
질문 # 246
What must be considered when viewing spam messages addressed to an email alias on Cisco ESA?
정답:D
질문 # 247
......
우리Pass4Test가 제공하는 최신, 최고의Cisco 300-720시험관련 자료를 선택함으로 여러분은 이미 시험패스성공이라고 보실수 있습니다.
300-720합격보장 가능 덤프공부: https://www.pass4test.net/300-720.html
그 외, Pass4Test 300-720 시험 문제집 일부가 지금은 무료입니다: https://drive.google.com/open?id=1wqG8Co0NRvUj9b9AwEF7J4D9CmlhNRzw