CCNP Security (300-720 SESA) Practice Exam
The CCNP Security (300-720 SESA) exam, also known as Securing Email with Cisco Secure Email Appliance (SESA), validates your expertise in administering and securing email communication using Cisco's email security solution.
Who Should Take This Exam?
- Email Security Administrators: Individuals managing and maintaining Cisco Secure Email Appliance for email security within the organization.
- Network Security Specialists (Email Focus): Network security professionals focusing on securing email communication and mitigating email-based threats.
- IT Security Analysts (Email Security): Security analysts specializing in email security who want to validate their skills in managing Cisco's email security solution.
Prerequisites
There are no formal prerequisites for taking the CCNP Security (300-720 SESA) exam. However, a foundational understanding of the following areas would be highly beneficial:
- Email Security Concepts: Knowledge of common email threats, filtering techniques, and email security best practices.
- Networking Fundamentals: Basic understanding of network protocols and email delivery processes (SMTP, POP3, IMAP).
- Cisco Secure Email Appliance (Working Knowledge): Familiarity with Cisco Secure Email Appliance functionalities and configuration options (helpful, but not mandatory).
Roles and Responsibilities
- Cisco Secure Email Appliance Administrator: Taking primary responsibility for configuring, managing, and maintaining the Cisco Secure Email Appliance for optimal email security.
- Email Security Analyst (Advanced): Performing advanced analysis of email threats, investigating email security incidents, and fine-tuning email security policies using Cisco Secure Email Appliance functionalities.
- Email Security Support Specialist: Providing technical support to users regarding email security issues and functionalities related to Cisco Secure Email Appliance.
Exam Details
- Length of Time: 90 Minutes
- Registration Fee: $300 USD
- Exam Language English, Japanese
Course Outline
1. Cisco Email Security Appliance Administration 15%
1.1. Configure Cisco Email Security Appliance features
1.2. Describe centralized services on a Cisco Content SMA
1.3. Configure mail policies
2. Spam Control with Talos SenderBase and Antispam 15%
2.1 Control spam with Talos SenderBase and Antispam
2.2 Describe graymail management solution
2.3 Configure file reputation filtering and file analysis features
2.4 Implement malicious or undesirable URLs protection
2.5 Describe the bounce verification feature
3. Content and Message filters 20%
3.1 Describe the functions and capabilities of content filters
3.2 Create text resources such as content dictionaries, disclaimers, and templates
3.3 Configure message filters components, rules, processing order and attachment scanning
3.4 Configure scan behavior
3.5 Configure the Cisco ESA to scan for viruses using Sophos and McAfee scanning engines
3.6 Configure outbreak filters
3.7 Configure Data Loss Prevention (DLP)
4. LDAP and SMTP Sessions 15%
4.1 Configure and verify LDAP servers and queries (Queries and Directory Harvest Attack)
4.2 Understand spam quarantine functions
4.3 Understand SMTP functionality
5. Email Authentication and Encryption 20%
5.1 Configure Domain Keys and DKIM signing
5.2 Configure SPF and SIDF
5.3 Configure DMARC verification
5.4 Configure forged email detection
5.5 Configure email encryption
5.6 Describe S/MIME security services and communication encryption with other MTAs
5.7 Manage certificate authorities
6. System Quarantines and Delivery Methods 15%
6.1 Configure quarantine (spam, policy, virus, and outbreak)
6.2 Utilize safelists and blocklists to control email delivery
6.3 Manage messages in local or external spam quarantines
6.4 Configure virtual gateways