2026 Actual Cisco 300-720 Dumps, Updated Exam Questions for Guaranteed Pass

300-720 free sample questions and answers

Cisco 300-720 practice quiz with correct answers for search indexing.

1. Question 1

   What are two phases of the Cisco ESA email pipeline? (Choose two.)

   Areject
   

   Bworkqueue
   

   Caction
   

   Ddelivery
   

   Equarantine
   

   Correct answer: B, D

   With DomainKeys or DKIM email authentication, the sender signs the email using public key cryptography. Configuring DomainKeys and DKIM Signing A signing key is the private key stored on the appliance. https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_chapter_010101.html?bookSearch=true

   
   

2. Question 2

   Which of the following two steps are required to enable Cisco SecureX integration on a Cisco Secure Email Gateway appliance? (Choose two.)

   APaste in the Registration Token generated from the Smart Licensing Account
   

   BEnable the Threat Response service under Network>Cloud Service Settings.
   

   CSelect the correct Threat Response Server based on your region.
   

   DPaste in the Registration Token generated from the Security Services Exchange.
   

   EEnable the Security Services Exchange service under Network>Cloud Service Settings
   

   Correct answer: B, C

   one of the methods to enable Cisco SecureX integration on a Cisco Secure Email Gateway appliance is to use the Threat Response service1.This service allows the appliance to send telemetry data to the SecureX cloud and provide visibility and response capabilities across multiple security products1.To use this service, the administrator needs to perform the following steps1:

   Enable the Threat Response service: The administrator needs to go to Network > Cloud Service Settings and enable the Threat Response service.This will generate a registration token that can be used to register the appliance with SecureX1.

   Select the correct Threat Response Server: The administrator needs to select the appropriate Threat Response server based on the region where the appliance is located.The available regions are North America, Europe, and Asia Pacific1.

   
   

3. Question 3

   Which action do Outbreak Filters take to stop small-scale and nonviral attacks, such as phishing scams and malware distribution sites?

   ARewrite URLs to redirect traffic to potentially harmful websites through a web security proxy
   

   BBlock all emails from email domains associated with potentially harmful websites.
   

   CStrip all attachments from email domains associated with potentially harmful websites.
   

   DQuarantine messages that contain links to potentially harmful websites until the site is taken offline
   

   Correct answer: A

   Outbreak Filters can take the action of rewriting URLs to redirect traffic to potentially harmful websites through a web security proxy. This allows the Cisco Secure Email Gateway to scan the content of the websites and block or warn the user if they are malicious or undesirable. This action can stop small-scale and nonviral attacks, such as phishing scams and malware distribution sites, that may not be detected by other filters.Reference: [Cisco Secure Email Gateway Administrator Guide - Configuring Outbreak Filters]

   
   

4. Question 4

   Which action is a valid fallback when a client certificate is unavailable during SMTP authentication on Cisco ESA?

   ALDAP Query
   

   BSMTP AUTH
   

   CSMTP TLS
   

   DLDAP BIND
   

   Correct answer: B

   SMTP AUTH is a valid fallback action when a client certificate is unavailable during SMTP authentication on Cisco ESA. SMTP AUTH is a method of authenticating SMTP clients using username and password credentials, which can be verified by an LDAP server or a local database on Cisco ESA.

   
   

5. Question 5

   An engineer is testing mail flow on a new Cisco ESA and notices that messages for domain abc.com are stuck in the delivery queue. Upon further investigation, the engineer notices that the messages pending delivery are destined for 192.168.1.11, when they should instead be routed to 192.168.1.10.

   What configuration change needed to address this issue?

   AAdd an address list for domain abc.com.
   

   BModify Destination Controls entry for the domain abc.com.
   

   CModify the SMTP route for the domain and change the IP address to 192.168.1.10.
   

   DModify the Routing Tables and add a route for IP address to 192.168.1.10.
   

   Correct answer: C

   
   

   You can use the SMTP route feature on Cisco ESA to specify how messages for a specific domain are routed to their destination.You can modify the SMTP route for the domain abc.com and change the IP address to 192.168.1.10 to ensure that messages are delivered correctly3. Reference =Securing Email with Cisco Email Security Appliance (SESA) v3.1