Cisco Exam 300-720 Topic 6 Question 94 Discussion

Actual exam question for Cisco's 300-720 exam

Question #: 94
Topic #: 6

Which components are required when encrypting SMTP with TLS on a Cisco Secure Email Gateway appliance when the sender requires TLS verification?

ADER certificate and matching public key from a CA

Bself-signed certificate in PKCS#7 format

CX. 509 certificate and matching private key from a CA

Dself-signed certificate in PKCS#12 format

Show Suggested Answer

Suggested Answer: C

To encrypt SMTP with TLS on a Cisco Secure Email Gateway appliance when the sender requires TLS verification, the components that are required are an X.509 certificate and matching private key from a CA. The certificate must be signed by a trusted CA and contain the domain name or IP address of the listener in the Subject or Subject Alternative Name fields. The private key must be unencrypted and match the certificate.Reference: [Cisco Secure Email Gateway Administrator Guide - Configuring TLS]

by Lashaunda at Sep 15, 2024, 10:02 PM

Limited Time Offer

25%

Off

Get Premium 300-720 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Valentin

2 days ago

I'm not sure, but I think A) DER certificate and matching public key from a CA could also be a valid option.

upvoted 0 times

...

Yuriko

18 days ago

B looks tempting, but self-signed certs are a no-no in this scenario. Gotta go with the CA-issued X.509 certificate, folks.

upvoted 0 times

...

Filiberto

19 days ago

I agree with Viola, because X.509 certificates are commonly used for TLS encryption.

upvoted 0 times

...

Laurel

20 days ago

Definitely C. X.509 certificate and matching private key from a CA is the way to go. Anything else just won't cut it for SMTP TLS encryption on a Cisco appliance.

upvoted 0 times

Sheridan

2 hours ago

Using X.509 certificate and matching private key from a CA ensures secure communication.

upvoted 0 times

...

Melina

2 days ago

I agree, C is the correct answer for encrypting SMTP with TLS on a Cisco Secure Email Gateway appliance.

upvoted 0 times

...

Viola

21 days ago

I think the correct answer is C) X.509 certificate and matching private key from a CA.

upvoted 0 times

...