Cisco 300-720 Securing Email with Cisco Email Security Appliance (SESA) Online Training
Cisco 300-720 Online Training
The questions for 300-720 were last updated at Oct 23,2025.
- Exam Code: 300-720
- Exam Name: Securing Email with Cisco Email Security Appliance (SESA)
- Certification Provider: Cisco
- Latest update: Oct 23,2025
How does the graymail safe unsubscribe feature function?
- A . It strips the malicious content of the URI before unsubscribing.
- B . It checks the URI reputation and category and allows the content filter to take an action on it.
- C . It redirects the end user who clicks the unsubscribe button to a sandbox environment to allow a safe unsubscribe.
- D . It checks the reputation of the URI and performs the unsubscribe process on behalf of the end user.
Which method enables an engineer to deliver a flagged message to a specific virtual gateway address in the most flexible way?
- A . Set up the interface group with the flag.
- B . Issue the altsrchost command.
- C . Map the envelope sender address to the host.
- D . Apply a filter on the message.
An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters/DLP actions available at a level different from the cluster level."
What is the cause of this error?
- A . Content filters are configured at the machine-level on esa1.
- B . DLP is configured at the cluster-level on esa2.
- C . DLP is configured at the domain-level on esa1.
- D . DLP is not configured on host1.
Which feature must be configured before an administrator can use the outbreak filter for nonviral threats?
- A . quarantine threat level
- B . antispam
- C . data loss prevention
- D . antivirus
Which type of attack is prevented by configuring file reputation filtering and file analysis features?
- A . denial of service
- B . zero-day
- C . backscatter
- D . phishing
When DKIM signing is configured, which DNS record must be updated to load the DKIM public signing key?
- A . AAAA record
- B . PTR record
- C . TXT record
- D . MX record
Which attack is mitigated by using Bounce Verification?
- A . spoof
- B . denial of service
- C . eavesdropping
- D . smurf
When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)
- A . redirect
- B . return
- C . drop
- D . delay
- E . abandon
Which two features are applied to either incoming or outgoing mail policies? (Choose two.)
- A . Indication of Compromise
- B . application filtering
- C . outbreak filters
- D . sender reputation filtering
- E . antivirus
What must be configured to allow the Cisco ESA to encrypt an email using the Cisco Registered Envelope Service?
- A . provisioned email encryption profile
- B . message encryption from a content filter that select "Message Encryption" over TLS
- C . message encryption from the mail flow policies with "CRES" selected
- D . content filter to forward the email to the Cisco Registered Envelope server