Q1. Which three search parameters are supported by the Email Security Monitor? (Choose three.) 

A. Destination domain 

B. Network owner 

C. MAC address 

D. Policy requirements 

E. Internal sender IP address 

F. Originating domain 

View Answer

Q2. CCORRECT TEXT 

View Answer

Q3. Which two options are features of the Cisco Email Security Appliance? (Choose two.) 

A. Cisco Anti-Replay Services 

B. Cisco Destination Routing 

C. Cisco Registered Envelope Service 

D. Cisco IronPort SenderBase Network 

View Answer

Q4. When you deploy a sensor to send connection termination requests, which additional traffic-monitoring function can you configure the sensor to perform? 

A. Monitor traffic as it flows to the sensor. 

B. Monitor traffic as it flows through the sensor. 

C. Monitor traffic from the Internet only. 

D. Monitor traffic from both the Internet and the intranet. 

View Answer

Q5. A network engineer can assign IPS event action overrides to virtual sensors and configure 

which three modes? (Choose three.) 

A. Anomaly detection operational mode 

B. Inline TCP session tracking mode 

C. Normalizer mode 

D. Load-balancing mode 

E. Inline and Promiscuous mixed mode 

F. Fail-open and fail-close mode 

View Answer

Q6. Which two Cisco IPS events will generate an IP log? (Choose two.) 

A. A signature had an event action that was configured with log packets. 

B. A statically configured IP or IP network criterion was matched. 

C. A dynamically configured IP address or IP network was matched. 

D. An attack produced a response action. 

View Answer

Q7. Which command can change the HTTPS SSL method on the Cisco ESA? 

A. sslconfig 

B. strictssl 

C. sshconfig 

D. adminaccessconfig 

View Answer

Q8. When you configure the Cisco ESA to perform blacklisting, what are two items you can disable to enhance performance? (Choose two.) 

A. spam scanning 

B. antivirus scanning 

C. APT detection 

D. rootkit detection 

View Answer

Q9. Which Cisco ESA command is used to edit the ciphers that are used for GUI access? 

A. interfaceconfig 

B. etherconfig 

C. certconfig 

D. sslconfig 

View Answer

Q10. Connections are being denied because of SenderBase Reputation Scores. Which two features must be enabled in order to record those connections in the mail log on the Cisco ESA? (Choose two.) 

A. Rejected Connection Handling 

B. Domain Debug Logs 

C. Injection Debug Logs 

D. Message Tracking 

View Answer