2022年最新の問題CCNP Securityと300-720リアル試験問をマスターせよ！ [Q21-Q42]

2022年最新のの問題CCNP Securityと300-720リアル試験問をマスターせよ！

突破受験者のシミュレーションされた300-720試験PDF問題を試そう

Cisco 300-720 認定試験の出題範囲：

トピック	出題範囲
トピック 1	検疫（スパム、ポリシー、ウイルス、およびアウトブレイク）着信および発信メッセージの構成
トピック 2	ローカルまたは外部のスパム検疫でメッセージを管理する CiscoEメールセキュリティアプライアンスの機能を設定する
トピック 3	ファイルレピュテーションフィルタリングおよびファイル分析機能の構成悪意のあるまたは望ましくないURL保護の実装
トピック 4	認証局の管理仮想ゲートウェイの構成電子メール暗号化の構成
トピック 5	ドメインキーとDkim署名ルーティングと配信機能の構成メールポリシーの構成
トピック 6	スパム検疫エイリアスを利用してクエリを統合スパム検疫機能を理解する
トピック 7	ソフォスおよびマカフィースキャンエンジンを使用してウイルスをスキャンするようにCiscoEsaを設定する初期設定プロセス
トピック 8	メッセージフィルターの構成コンポーネント、ルール、処理順序、添付ファイルのスキャングレイメール管理ソリューションの説明
トピック 9	TalosSenderbaseとAntispamでスパムを制御コンテンツフィルターの機能と機能を説明する
トピック 10	データ損失防止（Dlp）の構成 SMTP機能の理解 Dmarc検証の構成
トピック 11	S Mimeセキュリティサービスと他のMtasとの通信暗号化について説明する
トピック 12	セーフリストとブロックリストを利用して、電子メールの配信を制御したり、偽造された電子メールの検出を構成したりする
トピック 13	TalosSenderbaseとアンチスパムによるスパム制御バウンス検証機能の説明
トピック 14	コンテンツ辞書、免責事項、テンプレートハードウェアパフォーマンス仕様などのテキストリソースを作成する

質問 21
A recent engine update was pulled down for graymail and has caused the service to start crashing. It is critical to fix this as quickly as possible.
What must be done to address this issue?

A. Download another update from the IMS and Graymail page.
B. Download another update from the Service Updates page.
C. Roll back to a previous version of the engine from the System Health page.
D. Roll back to a previous version of the engine from the Services Overview page.

正解: D

質問 22
When the Cisco ESA is configured to perform antivirus scanning, what is the default timeout value?

A. 90 seconds
B. 60 seconds
C. 120 seconds
D. 30 seconds

正解: B

解説:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_chapter_01011.html

質問 23
When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?

A. PTR record
B. AAAA record
C. MX record
D. TXT record

正解: D

解説:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/213939-esa- configure-dkim-signing.html

質問 24
Which two certificate authority lists are available in Cisco ESA? (Choose two.)

A. system
B. user
C. custom
D. demo
E. default

正解: A,C

解説:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_011000.html#task_1194859

質問 25
Which two steps configure Forged Email Detection? (Choose two.)

A. Configure a content dictionary with executive email addresses.
B. Configure a filter to use the Forged Email Detection rule and dictionary.
C. Enable Forged Email Detection on the Security Services page.
D. Configure a filter to check the Header From value against the Forged Email Detection dictionary.
E. Configure a content dictionary with friendly names.

正解: A,B

解説:
Explanation/Reference: https://explore.cisco.com/esa-feature-enablement/user-guide-for-async-11

質問 26
An administrator has created a content filter to quarantine all messages that result in an SPF hardfail to review the messages and determine whether a trusted partner has accidentally misconfigured the DNS settings. The administrator sets the policy quarantine to release the messages after 24 hours, allowing time to review while not interrupting business.
Which additional option should be used to help the end users be aware of the elevated risk of interacting with these messages?

A. Modify Subject
B. Notify Recipient
C. Strip Attachments
D. Notify Sender

正解: A

質問 27
When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?

A. PTR record
B. AAAA record
C. MX record
D. TXT record

正解: D

質問 28
Which two query types are available when an LDAP profile is configured? (Choose two.)

A. recursive
B. proxy consolidation
C. user
D. routing
E. group

正解: D,E

解説:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011010.html

質問 29
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?

A. Apply a filter on the message.
B. Issue the altsrchost command.
C. Map the envelope sender address to the host.
D. Set up the interface group with the flag.

正解: B

解説:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html#con_1133810

質問 30
Which two features are applied to either incoming or outgoing mail policies? (Choose two.)

A. antivirus
B. application filtering
C. sender reputation filtering
D. outbreak filters
E. Indication of Compromise

正解: A,D

解説:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01001.html

質問 31
What is a benefit of implementing URL filtering on the Cisco ESA?

A. provides URL reputation protection
B. enhances reputation against malicious URLs
C. blacklists spam
D. removes threats from malicious URLs

正解: A

質問 32
Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)

A. active-active
B. active-standby
C. load balancing
D. SLA monitor
E. failover

正解: C,E

解説:
You can enter multiple host names to configure the LDAP servers for failover or load-balancing. Separate multiple entries with commas.
Reference:
https://www.cisco.com/c/en/us/td/docs/security/ces/user_guide/sma_user_guide/ b_SMA_Admin_Guide_ces_11/b_SMA_Admin_Guide_chapter_01010.html

質問 33
Email encryption is configured on a Cisco ESA that uses CRES.
Which action is taken on a message when CRES is unavailable?

A. It is encrypted by a Cisco encryption appliance.
B. It is requeued.
C. It is dropped and an error message is sent to the sender.
D. It is sent in clear text.

正解: D

解説:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117863- configure-esa-00.html

質問 34
Which two action types are performed by Cisco ESA message filters? (Choose two.)

A. quarantine actions
B. filter actions
C. final actions
D. non-final actions
E. discard actions

正解: C,D

解説:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/ b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_01000.html

質問 35
Which action on the Cisco ESA provides direct access to view the safelist/blocklist?

A. Export the SLBL to a .csv file.
B. Debug the mail flow policy.
C. Monitor Incoming/Outgoing Listener.
D. Show the SLBL cache on the CLI.

正解: A

解説:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117922-technote- esa-00.html

質問 36
Which action is a valid fallback when a client certificate is unavailable during SMTP authentication on Cisco ESA?

A. LDAP Query
B. SMTP TLS
C. LDAP BIND
D. SMTP AUTH

正解: D

解説:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/esa/esa12-0/user_guide/ b_ESA_Admin_Guide_12_0/b_ESA_Admin_Guide_12_0_chapter_011011.html

質問 37
Which global setting is configured under Cisco ESA Scan Behavior?

A. minimum depth of attachment recursion to scan
B. actions for unscannable messages due to attachment type
C. minimum attachment size to scan
D. attachment scanning timeout

正解: D

質問 38
When virtual gateways are configured, which two distinct attributes are allocated to each virtual gateway address? (Choose two.)

A. domain
B. external spam quarantine
C. DNS server address
D. DHCP server address
E. IP address

正解: A,E

解説:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118542-qa-esa- 00.html

質問 39
Which benefit does enabling external spam quarantine on Cisco SMA provide?

A. access to the spam quarantine interface on which a user can release, duplicate, or delete
B. ability to back up spam quarantine from multiple Cisco ESAs to one central console
C. ability to scan messages by using two engines to increase a catch rate
D. ability to consolidate spam quarantine data from multiple Cisco ESA to one central console

正解: D

解説:
Reference:
https://www.cisco.com/c/en/us/td/docs/security/security_management/sma/sma11-0/user_guide/ b_SMA_Admin_Guide/b_SMA_Admin_Guide_chapter_010101.html

質問 40
When URL logging is configured on a Cisco ESA, which feature must be enabled first?

A. senderbase reputation filter
B. virus outbreak filter
C. antispam
D. antivirus

正解: B

解説:
Reference:
https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118775-technote- esa-00.html (note under enable url filtering)

質問 41
An Encryption Profile has been set up on the Cisco ESA.
Drag and drop the steps from the left for creating an outgoing content filter to encrypt emails that contains the subject "Secure:" into the correct order on the right.