Exam 25: Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

An administrator is trying to enable centralized PVO but receives the error, "Unable to proceed with Centralized Policy, Virus and Outbreak Quarantines configuration as esa1 in Cluster has content filters / DLP actions available at a level different from the cluster level." What is the cause of this error?

A network administrator notices that there are a high number of queries to the LDAP server. The mail logs show an entry "550 Too many invalid recipients | Connection closed by foreign host." Which feature must be used to address this?

Which attack is mitigated by using Bounce Verification?

What is the maximum message size that can be configured for encryption on the Cisco ESA?

Which two Cisco ESA features are used to control email delivery based on the sender? (Choose two.)

When virtual gateways are configured, which two distinct attributes are allocated to each virtual gateway address? (Choose two.)

A Cisco ESA administrator has several mail policies configured. While testing policy match using a specific sender, the email was not matching the expected policy. What is the reason of this?

Which two action types are performed by Cisco ESA message filters? (Choose two.)

What is the default behavior of any listener for TLS communication?

When the Spam Quarantine is configured on the Cisco ESA, what validates end-users via LDAP during login to the End-User Quarantine?

Refer to the exhibit. Which SPF record is valid for mycompany.com?

Which type of attack is prevented by configuring file reputation filtering and file analysis features?

An engineer is testing mail flow on a new Cisco ESA and notices that messages for domain abc.com are stuck in the delivery queue. Upon further investigation, the engineer notices that the messages pending delivery are destined for 192.168.1.11, when they should instead be routed to 192.168.1.10. What configuration change needed to address this issue?

What is a valid content filter action?

Which two query types are available when an LDAP profile is configured? (Choose two.)

Which action must be taken before a custom quarantine that is being used can be deleted?

Which process is skipped when an email is received from safedomain.com, which is on the safelist?

When outbreak filters are configured, which two actions are used to protect users from outbreaks? (Choose two.)

Which action on the Cisco ESA provides direct access to view the safelist/blocklist?

How does the graymail safe unsubscribe feature function?