300-720 Practice Test

300-720 Practice Test practice questions, page 8 of 9, with answer review and explanations.

Question 36

When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?

  1. AAAA record
  2. PTR record
  3. TXT record
  4. MX record

Question 37

Which attack is mitigated by using Bounce Verification?

  1. spoof
  2. denial of service
  3. eavesdropping
  4. smurf

Question 38

When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)

  1. redirect
  2. return
  3. drop
  4. delay
  5. abandon

Question 39

Which two features are applied to either incoming or outgoing mail policies? (Choose two.)

  1. Indication of Compromise
  2. application filtering
  3. outbreak filters
  4. sender reputation filtering
  5. antivirus

Question 40

What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?

  1. provisioned email encryption profile
  2. message encryption from a content filter that select "Message Encryption" over TLS
  3. message encryption from the mail flow policies with "CRES" selected
  4. content filter to forward the email to the Cisco Registered Envelope server