Question 1

Refer to the exhibits. What must be done to enforce end user authentication before accessing quarantine?

Accepted Answer

The answer of   Refer to the exhibits. What...

Question 2

Which feature must be enabled first when URL logging is configured on a Cisco ESA?

Accepted Answer

The answer of Which feature must be enabled first when...

Question 3

An administrator has created a content filter to quarantine all messages that result in an SPF hardfail to review the messages and determine whether a trusted partner has accidentally misconfigured the DNS settings. The administrator sets the policy quarantine to release the messages after 24 hours, allowing time to review while not interrupting business. Which additional option should be used to help the end users be aware of the elevated risk of interacting with these messages?

Accepted Answer

Modifying the subject line can alert end users to the potential risk associated with the message, making them more cautious when interacting with it.

Question 4

Which two configurations are used on multiple LDAP servers to connect with Cisco ESA? (Choose two.)

Accepted Answer

The answer of Which two configurations are used on multiple...

Question 5

Refer to the exhibit. What is the correct order of commands to set filter 2 to active?

Accepted Answer

The answer of  Refer to the exhibit. What is...

Question 6

A company has deployed a new mandate that requires all emails sent externally from the Sales Department to be scanned by DLP for PCI-DSS compliance. A new DLP policy has been created on the Cisco ESA and needs to be assigned to a mail policy named 'Sales' that has yet to be created. Which mail policy should be created to accomplish this task?

Accepted Answer

The correct mail policy to create for scanning outgoing emails for PCI-DSS compliance is an "Outgoing Mail Policy" because it pertains to emails being sent externally from the organization.

Question 7

Which component must be added to the content filter to trigger on failed SPF Verification or DKIM Authentication verdicts?

Accepted Answer

A condition must be added to the content filter to trigger actions based on specific criteria, such as failed SPF Verification or DKIM Authentication verdicts.

Question 8

Which two Cisco ESA features are used to control email delivery based on the sender? (Choose two.)

Accepted Answer

Safelists and blocklists are used to control email delivery based on the sender by allowing or blocking emails from specific senders.

Question 9

An email containing a URL passes through the Cisco ESA that has content filtering disabled for all mail policies. The sender is sampleuser@test1.com, the recipients are testuser1@test2.com, testuser2@test2.com, testuser3@test2.com, and mailer1@test2.com. The subject of the email is Test Document395898847. An administrator wants to add a policy to ensure that the Cisco ESA evaluates the web reputation score before permitting this email. Which two criteria must be used by the administrator to achieve this? (Choose two.)

Accepted Answer

The answer of An email containing a URL passes through...

Question 10

An administrator needs to configure Cisco ESA to ensure that emails are sent and authorized by the owner of the domain. Which two steps must be performed to accomplish this task? (Choose two.)

Accepted Answer

The answer of An administrator needs to configure Cisco ESA...

Question 11

Which two components must be configured to perform DLP scanning? (Choose two.)

Accepted Answer

To perform DLP scanning, a DLP policy must be added to the DLP Policy Manager (B) and enabled on the Outgoing Mail Policy (C) to ensure that outgoing emails are scanned for data loss prevention.

Question 12

Users have been complaining of a higher volume of emails containing profanity. The network administrator will need to leverage dictionaries and create specific conditions to reduce the number of inappropriate emails. Which two filters should be configured to address this? (Choose two.)

Accepted Answer

The answer of Users have been complaining of a higher...

Question 13

A Cisco ESA administrator has noticed that new messages being sent to the Centralized Policy Quarantine are being released after one hour. Previously, they were being held for a day before being released. What was configured that caused this to occur?

Accepted Answer

The answer of A Cisco ESA administrator has noticed that...

Question 14

A recent engine update was pulled down for graymail and has caused the service to start crashing. It is critical to fix this as quickly as possible. What must be done to address this issue?

Accepted Answer

Rolling back to a previous version of the engine from the Services Overview page is the most direct way to revert to a stable state and address the crashing issue quickly.

Question 15

A network administrator notices that there are a high number of queries to the LDAP server. The mail logs show an entry "550 Too many invalid recipients | Connection closed by foreign host." Which feature must be used to address this?

Accepted Answer

SMTP is used to send emails. The error message "550 Too many invalid recipients | Connection closed by foreign host" indicates that the SMTP server is rejecting emails due to too many invalid recipients.

Exam 25: Securing the Web with Cisco Web Security Appliance (300-725 SWSA)