exam questions

Exam 300-720 All Questions

View all questions & answers for the 300-720 exam

Exam 300-720 topic 1 question 103 discussion

Actual exam question from Cisco's 300-720
Question #: 103
Topic #: 1
[All 300-720 Questions]

A list of company executives is routinely being spoofed, which puts the company at risk of malicious email attacks. An administrator must ensure that executive messages are originating from legitimate sending addresses. Which two steps must be taken to accomplish this task? (Choose two.)

  • A. Create an incoming content filter with SPF detection.
  • B. Create a content dictionary including a list of the names that are being spoofed.
  • C. Enable the Forged Email Detection feature under Security Settings.
  • D. Enable DMARC feature under Mail Policies.
  • E. Create an incoming content filter with the Forged Email Detection condition.
Show Suggested Answer Hide Answer
Suggested Answer: BE 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
GVKD
10 months, 4 weeks ago
Selected Answer: BE
B and E are Correct. Setting Up Forged Email Detection 1) Identify the users in your organization (for example, executives) whose messages are likely to be forged. Create a new content dictionary and add the names of the identified users to it. 2) Create an incoming content or message filter to detect forged messages and the actions that the appliance must take on such messages. Use the following: -Condition/Rule: Forged Email Detection https://www.cisco.com/c/en/us/td/docs/security/esa/esa11-1/user_guide/b_ESA_Admin_Guide_11_1/b_ESA_Admin_Guide_11_1_chapter_010101.html#con_1260492
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago