Cisco Exam 300-720 Topic 6 Question 94 Discussion

Actual exam question for Cisco's 300-720 exam

Question #: 94
Topic #: 6

Which components are required when encrypting SMTP with TLS on a Cisco Secure Email Gateway appliance when the sender requires TLS verification?

ADER certificate and matching public key from a CA

Bself-signed certificate in PKCS#7 format

CX. 509 certificate and matching private key from a CA

Dself-signed certificate in PKCS#12 format

Show Suggested Answer

Suggested Answer: C

To encrypt SMTP with TLS on a Cisco Secure Email Gateway appliance when the sender requires TLS verification, the components that are required are an X.509 certificate and matching private key from a CA. The certificate must be signed by a trusted CA and contain the domain name or IP address of the listener in the Subject or Subject Alternative Name fields. The private key must be unencrypted and match the certificate.Reference: [Cisco Secure Email Gateway Administrator Guide - Configuring TLS]

by Lashaunda at Sep 15, 2024, 10:02 PM

Limited Time Offer

25%

Off

Get Premium 300-720 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Krystina

2 months ago

I bet the exam writer is a Cisco engineer trying to trick us. But I ain't fallin' for it - C is the right answer!

upvoted 0 times

Carman

1 months ago

C) X. 509 certificate and matching private key from a CA

upvoted 0 times

...

Herminia

1 months ago

B) self-signed certificate in PKCS#7 format

upvoted 0 times

...

Janessa

1 months ago

A) DER certificate and matching public key from a CA

upvoted 0 times

...

Tomas

2 months ago

Hmm, PKCS#12 format, huh? Sounds like a trick question to me. C is the clear winner here.

upvoted 0 times

Dominga

1 months ago

User 3: Yeah, that's the way to go for encrypting SMTP with TLS on a Cisco Secure Email Gateway appliance.

upvoted 0 times

...

Simona

1 months ago

I agree, X.509 certificate and matching private key from a CA is needed.

upvoted 0 times

...

Amie

2 months ago

I think C is the correct answer.

upvoted 0 times

...

Valentin

2 months ago

I'm not sure, but I think A) DER certificate and matching public key from a CA could also be a valid option.

upvoted 0 times

...

Yuriko

3 months ago

B looks tempting, but self-signed certs are a no-no in this scenario. Gotta go with the CA-issued X.509 certificate, folks.

upvoted 0 times

...

Filiberto

3 months ago

I agree with Viola, because X.509 certificates are commonly used for TLS encryption.

upvoted 0 times

...

Laurel

3 months ago

Definitely C. X.509 certificate and matching private key from a CA is the way to go. Anything else just won't cut it for SMTP TLS encryption on a Cisco appliance.

upvoted 0 times

Herminia

2 months ago

Self-signed certificate in PKCS#7 format is not recommended for TLS verification on a Cisco Secure Email Gateway.

upvoted 0 times

...

Aleta

2 months ago

DER certificate and matching public key from a CA is not sufficient for TLS encryption on a Cisco appliance.

upvoted 0 times

...

Sheridan

2 months ago

Using X.509 certificate and matching private key from a CA ensures secure communication.

upvoted 0 times

...

Melina

2 months ago

I agree, C is the correct answer for encrypting SMTP with TLS on a Cisco Secure Email Gateway appliance.

upvoted 0 times

...

Viola

3 months ago

I think the correct answer is C) X.509 certificate and matching private key from a CA.

upvoted 0 times

...