NEW QUESTION 1
Which action must be taken before a custom quarantine that is being used can be deleted?

• A. Delete the quarantine that is assigned to a filter.
• B. Delete the quarantine that is not assigned to a filter.
• C. Delete only the unused quarantine.
• D. Remove the quarantine from the message action of a filter.

Answer: D

NEW QUESTION 2
An analyst creates a new content dictionary to use with Forged Email Detection.
Which entry will be added into the dictionary?

• A. mycompany.com
• B. Alpha Beta
• C. ^Alpha Beta$
• D. Alpha.Beta@mycompany.com

Answer: A

NEW QUESTION 3
When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?

• A. AAAA record
• B. PTR record
• C. TXT record
• D. MX record

Answer: B

Explanation:
37 Which attack is mitigated by using Bounce Verification?
A. spoof
B. denial of service
C. eavesdropping
D. smurf

NEW QUESTION 4
How does the graymail safe unsubscribe feature function?

• A. It strips the malicious content of the URI before unsubscribing.
• B. It checks the URI reputation and category and allows the content filter to take an action on it.
• C. It redirects the end user who clicks the unsubscribe button to a sandbox environment to allow a safe unsubscribe.
• D. It checks the reputation of the URI and performs the unsubscribe process on behalf of the end user.

Answer: D

NEW QUESTION 5
DRAG DROP
An Encryption Profile has been set up on the Cisco ESA.
Drag and drop the steps from the left for creating an outgoing content filter to encrypt emails that contains the subject "Secure:" into the correct order on the right.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 6
Which action is a valid fallback when a client certificate is unavailable during SMTP authentication on Cisco ESA?

• A. LDAP Query
• B. SMTP AUTH
• C. SMTP TLS
• D. LDAP BIND

Answer: B

NEW QUESTION 7
What is the default behavior of any listener for TLS communication?

• A. preferred-verify
• B. off
• C. preferred
• D. required

Answer: B

NEW QUESTION 8
Which type of query must be configured when setting up the Spam Quarantine while merging notifications?

• A. Spam Quarantine Alias Routing Query
• B. Spam Quarantine Alias Consolidation Query
• C. Spam Quarantine Alias Authentication Query
• D. Spam Quarantine Alias Masquerading Query

Answer: B

NEW QUESTION 9
Which two components form the graymail management solution in Cisco ESA? (Choose two.)

• A. cloud-based unsubscribe service
• B. uniform unsubscription management interface for end users
• C. secure subscribe option for end users
• D. integrated graymail scanning engine
• E. improved mail efficacy

Answer: AD

NEW QUESTION 10
What is the default HTTPS port when configuring spam quarantine on Cisco ESA?

• A. 83
• B. 82
• C. 443
• D. 80

Answer: A

NEW QUESTION 11
Which two features are applied to either incoming or outgoing mail policies? (Choose two.)

• A. Indication of Compromise
• B. application filtering
• C. outbreak filters
• D. sender reputation filtering
• E. antivirus

Answer: CE

NEW QUESTION 12
DRAG DROP
Drag and drop the AsyncOS methods for performing DMARC verification from the left into the correct order on the right.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 13
What occurs when configuring separate incoming mail policies?

• A. message splintering
• B. message exceptions
• C. message detachment
• D. message aggregation

Answer: A

NEW QUESTION 14
Which scenario prevents a message from being sent to the quarantine as an action in the scan behavior on Cisco ESA?

• A. A policy quarantine is missing.
• B. More than one email pipeline is defined.

Answer: A

NEW QUESTION 15
Which two steps configure Forged Email Detection? (Choose two.)

• A. Configure a content dictionary with executive email addresses.
• B. Configure a filter to use the Forged Email Detection rule and dictionary.
• C. Configure a filter to check the Header From value against the Forged Email Detection dictionary.
• D. Enable Forged Email Detection on the Security Services page.
• E. Configure a content dictionary with friendly names.

Answer: AB

NEW QUESTION 16
What are two primary components of content filters? (Choose two.)

• A. conditions
• B. subject
• C. content
• D. actions
• E. policies

Answer: AD

NEW QUESTION 17
Email encryption is configured on a Cisco ESA that uses CRES.
Which action is taken on a message when CRES is unavailable?

• A. It is requeued.
• B. It is sent in clear text.
• C. It is dropped and an error message is sent to the sender.
• D. It is encrypted by a Cisco encryption appliance.

Answer: B

NEW QUESTION 18
Which two are configured in the DMARC verification profile? (Choose two.)

• A. name of the verification profile
• B. minimum number of signatures to verify
• C. ESA listeners to use the verification profile
• D. message action into an incoming or outgoing content filter
• E. message action to take when the policy is reject/quarantine

Answer: AE

NEW QUESTION 19
DRAG DROP
Drag and drop the Cisco ESA reactions to a possible DLP from the left onto the correct action types on the right.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 20
When URL logging is configured on a Cisco ESA, which feature must be enabled first?

• A. antivirus
• B. antispam
• C. virus outbreak filter
• D. senderbase reputation filter

Answer: C

NEW QUESTION 21
......