NEW QUESTION 1
What is the default HTTPS port when configuring spam quarantine on Cisco ESA?

• A. 83
• B. 82
• C. 443
• D. 80

Answer: A

NEW QUESTION 2
Which feature utilizes sensor information obtained from Talos intelligence to filter email servers connecting into the Cisco ESA?

• A. SenderBase Reputation Filtering
• B. Connection Reputation Filtering
• C. Talos Reputation Filtering
• D. SpamCop Reputation Filtering

Answer: A

NEW QUESTION 3
Which two query types are available when an LDAP profile is configured? (Choose two.)

• A. proxy consolidation
• B. user
• C. recursive
• D. group
• E. routing

Answer: DE

NEW QUESTION 4
Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)

• A. load balancing
• B. SLA monitor
• C. active-standby
• D. failover
• E. active-active

Answer: AD

NEW QUESTION 5
Which type of query must be configured when setting up the Spam Quarantine while merging notifications?

• A. Spam Quarantine Alias Routing Query
• B. Spam Quarantine Alias Consolidation Query
• C. Spam Quarantine Alias Authentication Query
• D. Spam Quarantine Alias Masquerading Query

Answer: B

NEW QUESTION 6
What is the order of virus scanning when multilayer antivirus scanning is configured?

• A. The default engine scans for viruses first and the McAfee engine scans for viruses second.
• B. The Sophos engine scans for viruses first and the McAfee engine scans for viruses second.
• C. The McAfee engine scans for viruses first and the default engine scans for viruses second.
• D. The McAfee engine scans for viruses first and the Sophos engine scans for viruses second.

Answer: C

NEW QUESTION 7
When URL logging is configured on a Cisco ESA, which feature must be enabled first?

• A. antivirus
• B. antispam
• C. virus outbreak filter
• D. senderbase reputation filter

Answer: C

NEW QUESTION 8
When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

• A. 30 seconds
• B. 90 seconds
• C. 60 seconds
• D. 120 seconds

Answer: C

NEW QUESTION 9
What is the default port to deliver emails from the Cisco ESA to the Cisco SMA using the centralized Spam Quarantine?

• A. 8025
• B. 6443
• C. 6025
• D. 8443

Answer: C

NEW QUESTION 10
When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?

• A. Enabling the End-User Safelist/Blocklist feature
• B. Spam Quarantine External Authentication Query
• C. Spam Quarantine End-User Authentication Query
• D. Spam Quarantine Alias Consolidation Query

Answer: C

NEW QUESTION 11
DRAG DROP
Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 12
Which setting affects the aggressiveness of spam detection?

• A. protection level
• B. spam threshold
• C. spam timeout
• D. maximum depth of recursion scan

Answer: B

NEW QUESTION 13
Which two are configured in the DMARC verification profile? (Choose two.)

• A. name of the verification profile
• B. minimum number of signatures to verify
• C. ESA listeners to use the verification profile
• D. message action into an incoming or outgoing content filter
• E. message action to take when the policy is reject/quarantine

Answer: AE

NEW QUESTION 14
When email authentication is configured on Cisco ESA, which two key types should be selected on the signing profile? (Choose two.)

• A. DKIM
• B. Public Keys
• C. Domain Keys
• D. Symmetric Keys
• E. Private Keys

Answer: AC

NEW QUESTION 15
Which two statements about configuring message filters within the Cisco ESA are true? (Choose two.)

• A. The filters command executed from the CLI is used to configure the message filters.
• B. Message filters configuration within the web user interface is located within Incoming Content Filters.
• C. The filterconfig command executed from the CLI is used to configure message filters.
• D. Message filters can be configured only from the CLI.
• E. Message filters can be configured only from the web user interface.

Answer: AD

NEW QUESTION 16
What is a benefit of implementing URL filtering on the Cisco ESA?

• A. removes threats from malicious URLs
• B. blacklists spam
• C. provides URL reputation protection
• D. enhances reputation against malicious URLs

Answer: C

NEW QUESTION 17
Which type of attack is prevented by configuring file reputation filtering and file analysis features?

• A. denial of service
• B. zero-day
• C. backscatter
• D. phishing

Answer: B

NEW QUESTION 18
Which scenario prevents a message from being sent to the quarantine as an action in the scan behavior on Cisco ESA?

• A. A policy quarantine is missing.
• B. More than one email pipeline is defined.

Answer: A

NEW QUESTION 19
What is the maximum message size that can be configured for encryption on the Cisco ESA?

• A. 20 MB
• B. 25 MB
• C. 15 MB
• D. 30 MB

Answer: A

NEW QUESTION 20
Which two factors must be considered when message filter processing is configured? (Choose two.)

• A. message-filter order
• B. lateral processing
• C. structure of the combined packet
• D. mail policies
• E. MIME structure of the message

Answer: AE

NEW QUESTION 21
Email encryption is configured on a Cisco ESA that uses CRES.
Which action is taken on a message when CRES is unavailable?

• A. It is requeued.
• B. It is sent in clear text.
• C. It is dropped and an error message is sent to the sender.
• D. It is encrypted by a Cisco encryption appliance.

Answer: B

NEW QUESTION 22
Which two components form the graymail management solution in Cisco ESA? (Choose two.)

• A. cloud-based unsubscribe service
• B. uniform unsubscription management interface for end users
• C. secure subscribe option for end users
• D. integrated graymail scanning engine
• E. improved mail efficacy

Answer: AD

NEW QUESTION 23
An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level."
What is the cause of this error?

• A. Content filters are configured at the machine-level on esa1.
• B. DLP is configured at the cluster-level on esa2.
• C. DLP is configured at the domain-level on esa1.
• D. DLP is not configured on host1.

Answer: D

NEW QUESTION 24
Which SMTP extension does Cisco ESA support for email security?

• A. ETRN
• B. UTF8SMTP
• C. PIPELINING
• D. STARTTLS

Answer: D

NEW QUESTION 25
Which two steps configure Forged Email Detection? (Choose two.)

• A. Configure a content dictionary with executive email addresses.
• B. Configure a filter to use the Forged Email Detection rule and dictionary.
• C. Configure a filter to check the Header From value against the Forged Email Detection dictionary.
• D. Enable Forged Email Detection on the Security Services page.
• E. Configure a content dictionary with friendly names.

Answer: AB

NEW QUESTION 26
......