Understand the certification
Certification Overview
Cisco CCNP Security Securing Email with Cisco ESA (300-720 SESA) focuses on one thing: keeping enterprise email traffic safe. The exam checks whether you can configure Cisco ESA, tune mail policies, control spam and malware, apply authentication and encryption methods, and connect email protection with directory services and DLP policy.
Exam Domains
- ESA Administration and Mail Policies: initial setup, listeners, mail flow, and message filters
- Anti-Spam, Anti-Virus, and Authentication: spam controls, virus scanning, SPF, DKIM, and DMARC
- Encryption, DLP, and LDAP: message encryption, data loss prevention, and directory integration
- Monitoring and Troubleshooting: event analysis, mail flow review, and ESA diagnostics
Who Is This For
This certification is a practical fit for email security engineers, security administrators, and Cisco practitioners who manage ESA in production.
Exam at a glance
- Exam code
- 300-720
- Provider
- Cisco
- Format
- Single choice / Multiple select
- Language
- English
- Validity
- 3 years
- Exam fee
- $330
Skills in focus
Learning outcomes
- Prepare for the Cisco 300-720 SESA exam with a structured path
- Configure and maintain Cisco ESA for enterprise email security
- Apply spam, antivirus, authentication, encryption, and DLP controls
- Improve your fit for email security and security operations roles
Who this is for
- Email security engineers working with Cisco ESA
- Security administrators who manage spam, malware, and encryption policies
- Cisco practitioners moving toward the CCNP Security track
- IT professionals who need practical email security skills
Before you start
- Basic networking and email protocol knowledge is expected
- Familiarity with SMTP and common mail flow concepts is helpful
- Hands-on experience with Cisco ESA or similar email gateways will help
- You should understand the basics of DNS and directory services
Your learning path
5 chapters
Plan your preparation
- Learning hours
- 40h
- With relevant experience
- 8-10 weeks
- Starting from scratch
- 12-16 weeks
- Daily study
- 1-2h
Included in your preparation
- 169 practice questions focused on real ESA configuration tasks
- Coverage of administration, mail policies, spam, antivirus, encryption, and DLP
- Practical review of SPF, DKIM, DMARC, LDAP, and Cisco SMA
- Mock exam format aligned to the official 120-minute test structure
- Clear explanations built around mail flow decisions and control choices
Preparation tips
- 65 题 120 分钟，平均每题 2 分钟，合理分配时间
- 及格分 825/1000，不确定的题先标记跳过，回头再做
- 排除法非常有用 — 先排掉明显错误的选项，剩下的再分析
- 多选题会告诉你选几个，仔细看题目要求
Common mistakes
- 没有读完所有选项就选答案 — 题目经常有"最佳"答案和"正确但不最佳"的干扰项
- 备考只刷题不理解原理 — 考试场景题需要理解底层概念
- 忽略时间管理 — 在难题上卡太久，导致后面简单题没时间做
Before you register
What is the Cisco 300-720 SESA exam and who is it for?
The 300-720 SESA (Securing Email with Cisco Email Security Appliance) is a CCNP Security concentration exam that validates your ability to secure enterprise email using Cisco Email Security Appliance (ESA). It is designed for security engineers, email administrators, and IT professionals who deploy and manage email security solutions to protect against spam, malware, phishing, data loss, and other email-borne threats.
What topics does the 300-720 SESA exam cover?
The exam covers key email security domains including: (1) Cisco ESA initial configuration and administration; (2) Mail policies, message filtering, and content filtering; (3) Anti-spam and anti-virus configuration (Outbreak Filters, Sophos/McAfee); (4) Email authentication (SPF, DKIM, DMARC); (5) Encryption and Data Loss Prevention (DLP); (6) LDAP and Active Directory integration for recipient verification; (7) Centralized management with Cisco Security Management Appliance (SMA). Hands-on experience with Cisco ESA is highly recommended.
How difficult is the 300-720 exam and how should I prepare?
The 300-720 exam is 120 minutes long with approximately 65 questions, requiring a score of 825/1000 to pass. The exam fee is $330 USD. It is considered moderately difficult, requiring practical knowledge of email security concepts and Cisco ESA configuration. Recommended preparation includes 3-6 months of study, hands-on lab practice with Cisco ESA (virtual or physical), and familiarity with email protocols (SMTP, IMAP). The certification is valid for 3 years.
Learner experiences
Loading reviews…
Done reading? Next steps
Start with the first chapter.
2 free chapters · Full preparation from $29