Practice 300-720 Exam Online

Question 1

An engineer wants to ensure that emails received by company users that contain URLs do not make

them susceptible to data loss from accessing malicious or undesired external content sources Which

two features must be configured on Cisco Secure Email Gateway to meet this requirement1? (Choose

two.)

A : antispam scanning

B : data loss prevention

C : graymail detection

D : URL filtering

E : antivirus scanning

Answer: A,D

Question 2

An organization wants to designate help desk personnel to assist with tickets that request the release of messages from the spam quarantine because company policy does not permit direct end-user access to the quarantine. Which two roles must be used to allow help desk personnel to release messages while restricting their access to make configuration changes in the Cisco Secure Email Gateway? (Choose two.)

A : Administrator

B : Help Desk User

C : Read-Only Operator

D : Technician

E : Quarantine Administrator

Answer: B,E

Question 3

Refer to the exhibit.

An administrator has configured File Reputation and File Analysis on the Cisco Secure Email Gateway

appliance however it does not function as expected What must be configured on the appliance for

this to function?

A : Upload the Root CA certificate for the File Reputation cloud to the Cisco Secure Email Gateway.

B :

Open port 443 on the firewall for the Cisco Secure Email Gateway to connect to the File Reputation cloud.

C :

Configure the Cisco Secure Email Gateway to use SSL for the connection to the File Reputation server

D :

Restart the File Reputation service to force the scanning engine to connect to the File Reputation cloud.

Answer: C

Question 4

Which two features of Cisco Email Security are added to a Sender Group to protect an organization against email threats? (Choose two.)

A : NetFlow

B : geolocation-based filtering

C : heuristic-based filtering

D : senderbase reputation filtering

E : content disarm and reconstruction

Answer: B,D

Question 5

A company has recently updated their security policy and now wants to drop all email messages

larger than 100 MB coming from external sources. The Cisco Secure Email Gateway is LDAP

integrated and all employee accounts are in the group "Employees". Which filter rule configuration

provides the desired outcome?

A : if (mail-from-group == 'Employees') and (body-size > "100M") {drop()}

B : if (mail-from-group != 'Employees') and (body-size > 100M) {drop();}

C : if (mail-from-group == 'Employees') and (body-size > 100M) {bounce();}

D : if ('mail-from-group != Employees') and (body-size > 100M) {drop();}

Answer: A

Name:	Securing Email with Cisco Email Security Appliance
Exam Code:	300-720
Certification:	CCNP Security
Vendor:	Cisco
Total Questions:	191
Last Updated:	Oct 01, 2026

Cisco 300-720 Answers