Summer Special Flat 65% Limited Time Discount offer - Ends in 0d 00h 00m 00s - Coupon code: netdisc

Cisco 300-820 Implementing Cisco Collaboration Cloud and Edge Solutions (300-820 CLCEI) Exam Practice Test

Page: 1 / 21
Total 207 questions

Implementing Cisco Collaboration Cloud and Edge Solutions (300-820 CLCEI) Questions and Answers

Testing Engine

  • Product Type: Testing Engine
$49  $139.99

PDF Study Guide

  • Product Type: PDF Study Guide
$42  $119.99
Question 1

Refer to the exhibit. An administrator set up a B2B interop with a business partner running a Microsoft Lync environment and can successfully make outbound video calls to Jane.doe@ciscovideo.com. Inbound calls to paul.smith@ciscovoice.com, however, are failing. A quick SRV search returns the records in the exhibit. Which record must be modified to resolve this challenge?

Options:

A.

_h323ls._udp.ciscovoice.com

B.

_sipfederationtcp._tcp.ciscovoice.com

C.

_sips._tcp.ciscovoice.com

D.

_collab-edge._tls.ciscovoice.com

Question 2

What is the Cisco-recommended key length in bits for a Cisco Expressway certificate?

Options:

A.

1024

B.

2048

C.

4096

D.

8192

Question 3

When does the Webex App Endpoint send media to the Video Mesh cluster during a meeting?

Options:

A.

when the Webex cloud media services are offline

B.

when there is insufficient bandwidth at the MPLS WAN edge

C.

when the round-trip delay to the Video Mesh cluster is shorter than the round-trip delay to the Webex cloud media services

D.

when there is insufficient bandwidth at the internet edge

Question 4

What is the default DSCP value for video traffic that is routed through an Expressway server?

Options:

A.

36

B.

24

C.

0

D.

24

Question 5

An organization has a domain name of example.com. Which two SRV records are valid for a SIP and H 323 communication? (Choose two)

Options:

A.

_collab-edge._tls.example.com

B.

_sips_tcp.example.com

C.

_h323ls_tcp.example.com

D.

_h323ls._udp.example.com

E.

_sips._udp.example.com

Question 6

Which service is available in a cloud-based deployment using Cisco Webex Messenger?

Options:

A.

Presence

B.

Phone services

C.

Voicemail

D.

Call forward services

Question 7

An Expressway Server has both network protocols (IPv4 and IPv6) enabled. Which two behaviors are correct? (Choose two.)

Options:

A.

If the calling endpoint is on an IPv4-Only network and the called endpoint is on an IPV6-Only network, a NAT64 device must convert the IPv4 addresses to IPv6 addresses.

B.

Endpoints register with either IPv4 or IPv6 addresses, but dual-stack endpoints choose IPv6 protocol by default.

C.

If the calling endpoint is on an IPv4-Only network and the called endpoint is on an IPv6-Only network, the Expressway Server act as a gateway and convert the two protocol versions.

D.

Endpoints register only with IPv6 addresses on an Expressway Server with IPv6 protocol enabled regardless of the state of IPv4 protocol.

E.

Endpoints register with either IPv4 or IPv6 addresses, and endpoints decide which protocol to use by the format of the configured Expressway Server IP address.

Question 8

A company has an on-premises Cisco collaboration cluster that contains Cisco UCM, IM and Presence, and Cisco Webex in the cloud. The company wants to integrate the on-premises infrastructure with Webex to enable interoperability with the Webex App. An engineer already configured the cluster in Cisco UCM, IM and Presence, and the organization in the Webex Control Hub. Which action must the engineer take to complete the configuration?

Options:

A.

Deploy Directory Connector.

B.

Open the TCP 443 port from IM and Presence to Webex Cloud.

C.

Deploy a Webex Device Connector.

D.

Deploy a Cisco Expressway Message Connector host.

Question 9

A Cisco Webex Hybrid Video Mesh Node can be installed in the DMZ and on the internal network.

Which statement is true?

Options:

A.

Webex Cloud supports either a DMZ-based Mesh Node for security or an internal-based Mesh Node for media control only.

B.

Installing a Video Mesh Node in the DMZ requires you to open TCP and UDP port 4444 in your internal firewall for full clustering functionality.

C.

Installing a Video Mesh Node in the DMZ requires the external firewall to allow UDP traffic from ANY port to the address of the Video Mesh Nodes via port 5004.

D.

Using internal Video Mesh Node also works due to Mobile and Remote Access setup for Webex Teams clients. A DMZ node is added for extra security.

Question 10

Which two statements about Mobile and Remote Access certificate are true? (Choose two.)

Options:

A.

Expressway Core can use private CA signed certificate.

B.

You must upload the root certificates in the phone trust store.

C.

Expressway must generate certificate signing request.

D.

Expressway Edge must use public CA signed certificate.

E.

The Jabber client can work with public or private CA signed certificate.

Question 11

An administrator made changes to a directory connector for Webex AD synchronization. The number of users synchronized is quite large and the change should affect only a limited number of users. How can the administrator check the result before executing the synchronization?

Options:

A.

Initiate an incremental synchronization from the Director Connector app on the on-premises Windows server because it will ask to save the changes.

B.

Initiate a dry run of an incremental synchronization from the Director Connector app on the on-premises Windows server.

C.

Initiate a dry run of an incremental synchronization from the Director Connector in Control Hub.

D.

Initiate an incremental synchronization from the Director Connector in Control Hub because it will ask to save changes.

Question 12

An administrator has been asked to configure Video Mesh signaling traffic to route through a proxy.

Which is an available proxy type in the Video Mesh node configuration to support this deployment model?

Options:

A.

Transparent Explicit Proxy

B.

Transparent Inspecting Proxy

C.

Reverse Proxy

D.

Distorting Proxy

Question 13

How do the Cisco Expressway-C and Expressway-E servers transmit media to each other?

Options:

A.

RTP and RTCP are multiplexed for all internal and external video endpoints across the traversal link using UDP.

B.

When the Expressway-C receives RTP and RTCP media, it establishes a new UDP socket with the Expressway-E.

C.

RTP and RTCP are multiplexed for all internal and external video endpoints across the traversal link using TLS.

D.

When the Expressway-E receives RTP and RTCP media, it establishes a new UDP socket with the Expressway-C.

Question 14

Refer to the exhibit. A Cisco Webex device on an enterprise network has identified the given STUN round-trip delays in milliseconds to the enterprise Video Mesh clusters and two Webex Cloud Media clusters during the call setup. Which correct sequence of clusters is the client connecting to?

Options:

A.

US West Coast WCMC. If US West Cost WCMC is full, then Europe WCMC because clients select clusters in the order of SRT delays.

B.

DC Europe. If DC Europe is full, DC APAC because clients select on-premises clusters in the order of SRT delays before using cloud resources.

C.

DC Europe. If DC Europe is full, US West Coast WCMC because clients select resources in the order of SRT delays but ignore SRTs greater than 250 ms.

D.

US West Coast WCMC. Clients continuously monitor DC US cluster and reconnect when DC US are available to save bandwidth.

Question 15

For a Mobile and Remote Access deployment, which server's certificate must include the Unified registration domain as a Subject Alternate Name?

Options:

A.

Expressway-C server certificate

B.

Cisco Unified Communications Manager server certificate

C.

Expressway-E server certificate

D.

Expressway-C and Expressway-E server certificate

Question 16

An administrator installs a new webserver (server1.example.com – 10.1.1.90) for storing Cisco Jabber update files to the network, but all Mobile and Remote Access registered clients still run the old Jabber software version, and the update fails. Which configuration task on an Expressway server solves the Jabber software update issue?

Options:

A.

Add a rule with the URL http://server1.example.com:80/ to the outbound HTTP allow list manually to allow pushing the new software to the clients.

B.

Add a rule with the URL http://server1.example.com:80/ to the inbound HTTP allow list manually to allow access to the new web server.

C.

Add a rule with the server IP address 10.1.1.90 in the URL to the inbound HTTP allow list because server names and FQDNs are not supported.

D.

Run an IM and Presence server discovery process on Expressway-C to add the new web server to the inbound HTTP allow list automatically.

Question 17

Which user management method uses the Webex Directory Connector to add and synchronize users to the Control Hub organization?

Options:

A.

Synchronize from Active Directory.

B.

Synchronize from Azure AD.

C.

Synchronize from "Add using People API'.

D.

Synchronize from Okta.

Question 18

A company has a single Expressway-E that exhibits high resource utilization. An engineer checks the logs and finds numerous fraudulent attempts from sip:200@cisco.com. Where must the engineer go to configure a call policy rule and block the desired URI?

Options:

A.

Call History Configuration > Call Policy > Rules

B.

Configuration > Call History > Policy > Rules

C.

Configuration > Call Policy > Rules

D.

Configuration > Policy > Inbound > Rules

Question 19

Which configuration is required when implementing Mobile and Remote Access on Cisco Expressway?

Options:

A.

IPS

B.

SAML authentication

C.

Cisco Unified CM publisher address

D.

SSO

Question 20

Why would a Cisco Jabber contact under Hybrid Messaging Integration be grayed out?

Options:

A.

The contact uses Cisco Webex Teams and Jabber and remains as Do not Disturb for 30 minutes.

B.

The contact was using only Cisco Webex Teams and changed the status to Away.

C.

The contact set Out of the Office for Cisco Webex Teams.

D.

The other user has not used Cisco Webex Teams or Jabber within the last 72 hours, so they are offline.

Question 21

Refer to the exhibit. When users sign in to Cisco Jabber through Mobile and Remote Access, they cannot see their own photo or the photo of their contacts next to each name. Which action must be taken in Cisco Expressway-C to resolve the issue?

Options:

A.

Add an HTTP allow list for the Instant Message and Presence server.

B.

Add an allow call policy rule from the Cisco UCM traversal zone.

C.

Upload the missing Instant Messaging and Presence server certificate to fix the connection to its server.

D.

Add an HTTP allow list for the web server that contains the photos.

Question 22

Refer to the exhibit.

If the Webex Teams device cannot connect to Video Mesh Cluster-1 because it is busy, which media node does the Webex Teams device connect to next?

Options:

A.

Both Cloud Node US-EAST and US-WEST

B.

Video Mesh Cluster-2

C.

Cloud Node US-EAST

D.

Cloud Node US-WEST

Question 23

Refer to the exhibit.

When a Jabber user attempts to connect from outside of the organization, the user enters the login information as "user@example.com" and receives the error "Cannot find your services Automatically". The engineer tries to resolve SRV records used by Jabber.

DNS A record "expressway-e.example.com" points to the Expressway-E IP and "cucm.example.com" points to the Cisco Unified Communications Manager.

Which change resolves the DNS problem?

Options:

A.

Change cisco-uds to point to the Expressway-E FQDN.

B.

Change the collab-edge record to point to 5061.

C.

Remove the cisco-uds SRV record for the external DNS.

D.

Change the priority of the SRV record for cisco-uds.

Question 24

A Webex administrator is configuring the Webex Control Hub to enable enterprise users to sign into Webex securely by authenticating to the IdP of the organization. To conform to the SAML specification, to what can the NameID format be set?

Options:

A.

urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified

B.

urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress

C.

urn:oasis:names:tc:SAML:2.0:nameid-format:transient

D.

urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress

Question 25

Refer to the exhibit. A manager asks an engineer to create a CSV file for the HTTP allow list on the Expressway deployment. The engineer wrote the script shown and uploaded it to the Expressway, but it is not being accepted. Which action resolves the issue?

Options:

A.

Add the command POST at the end on this line “http://myServer4/myPath4,block,,,POST”.

B.

Remove the Method “PUT” from “http://myServer2:8000/myPath2,allow “my deployment”, “an allow test”, PUT”.

C.

Remove the line “https://myServer4/myPath4,allow,,,GET”.

D.

Nothing is wrong, but the file type is most likely not XML.

Question 26

Refer to the exhibit.

Which two outbound connections should an administrator configure on the internal firewall? (Choose two.)

Options:

A.

XMPP: TCP 7400

B.

SIP: TCP 7001

C.

SIP TCP 5061

D.

Media: UDP 36012 to 59999

E.

HTTPS: TCP 8443

Question 27

Refer to the exhibit.

Mobile Cisco Jabber cannot register with on-premises Cisco Unified Communications Manager using Mobile and Remote Access. Some logs were captured on Expressway Edge.

Which action corrects this problem?

Options:

A.

Ensure that the peer address does not match the Common Name on certificate.

B.

Ensure that the _cisco-uds SRV record has been configured.

C.

Ensure that the credential has been entered correctly.

D.

Ensure that the SIP domains are added on Expressway Core.

Question 28

Refer to the exhibit.

In an environment SIP devices are registered to CUCM and H.323 devices to VCS. What would be required to enable these calls to setup correctly?

Options:

A.

Create a presearch transform.

B.

Change the domain of SIP endpoint A to cisco.com.

C.

Disable SIP in the external zone.

D.

Change the interworking mode to On.

Question 29

What is the purpose of a transform in the Expressway server?

Options:

A.

A transform has the function as a neighbor zone in the Expressway. It creates a connection with another server.

B.

A transform changes the audio codec when the call goes through the Expressway.

C.

A transform is used to route calls to a destination.

D.

A transform changes an alias that matches certain criteria into another alias.

Question 30

An engineer attempts to upload a server certificate to an Expressway-C server but receives an error when they click the upload button that says that the file is invalid. The engineer is advised that this happens because the certificate was signed incorrectly and is missing an attribute. What must the engineer do to upload the certificate?

Options:

A.

Create a certificate request via Certificate Services Web Page and ensure that the certificate validity period is five years because the Expressway server validates this during certificate import.

B.

Create a certificate request via the Certificate Services Web Page and ensure that the Subject Common Name field contains the server FQDN and all Cisco Unified CM phone security profile names.

C.

Create a new certificate template with "Server authentication” and "Client authentication" enabled and use this template when signing the Expressway server certificate.

D.

Create a new certificate template with the certificate attribute "Allow private key to be exported" enabled and use this template when signing the Expressway server certificate.

Question 31

When a Cisco Webex Video Mesh Node is configured for an organization, which process does the Webex Teams client use to discover the optimal bridging resource?

Options:

A.

the lowest STUN round-trip delay to each node and cloud

B.

a reachable Video Mesh Node and then overflows to the cloud, if needed

C.

the SIP delay header during call setup

D.

an HTTPS speed and latency test to each node and the cloud

Question 32

Refer to the exhibit. An engineer is configuring Cisco Expressway-C to discover Cisco UCM by using an IP address and a TCP connection. After the configuration is saved, errors occur.

Which two changes must be made to resolve the errors? (Choose two.)

Options:

A.

Configure an application user with Cisco Computer Telephony Integration-enabled privileges in Cisco UCM.

B.

Configure an application user with Administrative XML privileges in Cisco UCM.

C.

Upload a valid Cisco Tomcat certificate from the Cisco UCM to Expressway-C.

D.

Set TLS verify mode to Off.

E.

Configure an HTTP allow list that contains the Cisco UCM

Question 33

An administrator is deploying Cisco Expressways for Mobile and Remote Access. The registration domain is “example.com”, and the Expressway-E FQDN is “expe.example.com”. Cisco Jabber clients on the internet cannot discover services via DNS lookup. Which SRV records must be configured in the public DNS to allow Service Discovery?

Options:

A.

_collab-edge._tls.example.com

B.

_cisco-uds._tcp.expe.example.com

C.

_cisco-uds._tcp.example.com

D.

_collab-edge._tls.expe.example.com

Question 34

Which DNS record and port combination must be resolved externally for Mobile and Remote Access to be used?

Options:

A.

_collab-edge on port 8443

B.

_cisco-uds-edge on port 5061

C.

_collab-edge on port 5061

D.

_cisco-uds on port 8443

Question 35

When the network requirements are configured for a new Video Mesh deployment, which firewall ports are required so that Video Mesh cascade signaling succeeds?

Options:

A.

TCP 443 and 444

B.

TCP 443 and 8443

C.

UDP 5004 and 5005

D.

UDP 33432 through 33433

Question 36

An engineer is deploying Mobile and Remote Access to allow external Cisco Jabber users to sign into a Cisco UCM cluster via Cisco Expressways. The users will sign-in in the format username@cisco.com. Contact photos for Jabber are hosted on a webserver with the FQDN of phonebook cisco.com. Which configuration must be completed to allow external Jabber users to see contact photos?

Options:

A.

An HTTP allow list entry must be made on the Expressway-E for phonebook cisco.com.

B.

A SIP allow list entry must be made on the Expressway-E for .*@cisco.com.

C.

An HTTP allow list entry must be made on the Expressway-C for phonebook cisco.com.

D.

A SIP allow list entry must be made on the Expressway-C for .*@cisco.com.

Question 37

What is one of the user-related prerequisites for Jabber Team Messaging Mode Installation?

Options:

A.

Create user accounts in Cisco Webex Control Hub only.

B.

Create user accounts in Cisco Unified Communications Manager only.

C.

Create user accounts in Cisco Unified IM and Presence.

D.

Create user accounts in Cisco Unified CM and Cisco Webex Control Hub.

Question 38

Which media encryption mode can be configured on an Expressway zone?

Options:

A.

Advanced Encryption Standard

B.

IPsec

C.

Triple Data Encryption Standard

D.

force unencrypted

Question 39

Which describes what could do on the Expressway-E to successfully route calls from Expressway-C on the internal network to the Internet?

Options:

A.

Application layer gateway could be enabled to bridge the media traffic.

B.

A static NAT route could be added to the firewall to bridge the two networks.

C.

The Expressway-E could be enabled for Dual-NIC capability.

D.

The Expressway-E could be enabled for interworking.

Question 40

In which mode does the Cisco Expressway act as a SIP-H.323 gateway only if one or more of the endpoints are locally registered?

Options:

A.

registered only

B.

gateway only

C.

off

D.

Ion

Question 41

Refer to the exhibit. The neighbor zone to Cisco UCM fails to come up when TLS verify mode is enabled on the Expressway-C for B2B traffic. Which Issue correctly describes the cause of the error?

Options:

A.

The certificate has a key length of 8192 bits.

B.

TLS verify mode is enabled on the neighbor zone.

C.

Subject Alternative Name fields are longer than 999 characters.

D.

The neighbor system FQDN is missing from Subject Alternative Name attributes of the certificate.

Question 42

Where can the administrator manage a Webex tenant?

Options:

A.

Cisco Webex administrator portal

B.

Cisco Webex management portal

C.

Cisco Webex control panel

D.

Cisco Webex Control Hub

Question 43

An engineer must configure the zone to connect to an Expressway-E using Single NIC with NAT. The internal IP address is 192.168.10.63, and the NAT address is 203.0.113.5. What must the engineer configure on the Expressway-C to meet this requirement?

Options:

A.

traversal zone with the peer address 192.168.10.63

B.

neighbor zone with the peer address 192.168.10.63

C.

traversal zone with the peer address of 203.0.113.5

D.

neighbor zone with the peer address of 203.0.113.5

Question 44

Refer to the exhibit.

Cisco Unified Communications Manager routes the call via the Webex Meetings route list and route group to the Video Mesh cluster Node#1 in the Video Mesh cluster is hosting the meeting and has reached full capacity, but other nodes in the cluster still have spare capacity.

What happens to the participant's call?

Options:

A.

Another node in the cluster is used and an intra-cluster cascade between the two Video Mesh nodes is formed.

B.

The call is queued.

C.

The call fails.

D.

Another node in the cluster is used and an intra-cluster cascade between Webex and the new Video Mesh node is formed.

Question 45

Refer to the exhibit. An engineer is deploying mobile and remote access in an environment that already had functioning Business to Business calling. Mobile and remote access SIP registrations are failing. To troubleshoot, SIP logs were collected. How is this issue resolved?

Options:

A.

Change the SIP profile on the SIP trunk for the Expressway-E to Standard SIP Profile for TelePresence Endpoint

B.

Change the “Incoming Port” in the SIP Trunk Security Profile for the Expressway-C to not match SIP line registrations

C.

Enable autoregistration for the appropriate DN range on the Cisco UCM servers running the CallManager service

D.

Write a custom normalization script since the “vcs-interop” normalization script does not allow registrations

Question 46

Within which cache timeline do the Webex App endpoints perform a STUN test to calculate round-trip delay time to available media node clusters?

Options:

A.

1 hour

B.

2 hours

C.

4 hours

D.

6 hours

Question 47

An engineer noticed that internal participants using Full HD endpoints are joining meetings hosted in the Video Mesh node. The quality of the calls is 720p. What must the engineer configure to support 1080p quality?

Options:

A.

Set the “Enhanced Layout Experience” within the Video Mesh settings in Cisco Webex Control Hub to 1080P HD video.

B.

Set the “Received Video Resolution” on the Video Mesh node to maximum.

C.

Turn on the “Enable 1080P HD video for all participants hosted on on-premises Video Mesh nodes” setting in the Cisco Webex Control Hub.

D.

Turn on the “Highest Detail, Best Motion: 1080P” setting in the Cisco Webex Control Hub.

Question 48

An engineer is supporting an existing Cisco Collaboration deployment that has internal and external home users using the solution without VPN. Business usage also includes B2B calling for voice and video. Suddenly the engineer receives a report that one of the home office users cannot use the Cisco Jabber client, and shortly after, a few more reports come in for the same error. What must the engineer check first to resolve this issue?

Options:

A.

client logs of the users

B.

real-time monitoring toll logs for problems

C.

alarms on the Cisco Expressways

D.

alarms on the Cisco UCM Cluster

Question 49

Refer to the exhibit. A company has a Cisco collaboration infrastructure that contains Cisco UCM and Cisco Expressway-C and Expressway-E for Mobile and Remote Access. When the engineer sets up the environment to support B2B calling, they discover that the zone stale between Expressway-C and Cisco UCM failed. What must the STEP Trunk Security Profile setting be changed to in Cisco UCM to resolve the issue?

Options:

A.

UDP for the outgoing transport type

B.

value other than the default listening port for outgoing SIP connections on Cisco UCM

C.

value other than the default listening port for incoming SIP connections on Cisco UCM

D.

TCP for the incoming transport type

Question 50

An organization wants to be able to call IP addresses and URI addresses. An engineer must configure Cisco Expressways to manage this request from the endpoints in the organization. How would the engineer configure the Expressways to allow these calls to be completed to external IP addresses?

Options:

A.

Set calls to unknown IP addresses to direct on the Cisco Expressways, and add a search rule on the Expressway-E

B.

Set calls to unknown IP addresses to indirect on the Cisco Expressways, and add a search rule on the Expressway-E

C.

Use search rules to manage calls to IP addresses, and the direct/indirect setting on the Expressway is used as a fallback only if the search rules do not exist

D.

Set calls to unknown IP addresses to indirect on the Expressway-C and direct on the Expressway-E, and add a search rule on the Expressway-E

Question 51

Refer to the exhibit. Which SIP trunk security profile configuration on the Cisco UCM server is used for a secured SIP trunk to an Expressway server that is already integrated with the Cisco UCM for Mobile and Remote Access?

Options:

A.

Device Security Mode: Encrypted

Incoming Transport Type: TLS

Outgoing Transport Type: TLS

Incoming Port*: 5061

B.

Device Security Mode: Encrypted

Incoming Transport Type: TLS

Outgoing Transport Type: TLS

Incoming Port*: 6061

C.

Device Security Mode: Non-Secure

Incoming Transport Type: TCP+UDP

Outgoing Transport Type: TCP

Incoming Port*: 5060

D.

Device Security Mode: Authenticated

Incoming Transport Type: TLS

Outgoing Transport Type: TLS

Incoming Port*: 6061

Question 52

Refer to the exhibit.

An Expressway-C and Expressway-E are configured for B2B calling and the Expressway- E zone is set to TLS Verify Currently, calls do not reach the Expressway-C. The Traversal Client zone on the Expressway-C for B2B reports the information in the exhibit for the Peer 1 address.

Which action resolves this error?

Options:

A.

Configure the Expressway-C Traversal Client zone Peer 1 address with the fully qualified domain name of the Expressway-E.

B.

Configure the Expressway-C Traversal Client zone transport protocol with TCP.

C.

Add a server certificate to the Expressway-C that is signed by a certificate authority.

D.

Add an intermediate certificate to the Expressway-C that is signed by a certificate authority.

Question 53

What are two reasons why port 8443 is unreachable from the Internet to the Expressway-E? (Choose two.)

Options:

A.

The MRA license is missing on the Expressway-E.

B.

The Unified Communications zone is down.

C.

Transform is not configured on Expressway-E.

D.

The SRV record for _cisco-uds is misconfigured.

E.

The firewall is blocking the port.

Question 54

An administrator configures a secure SIP trunk in Cisco UCM to Expressway-C. The SIP trunk fails to become active, and an examination of a packet capture finds that the TLS handshake failed with a “Certificate Unknown” error from Cisco UCM. To allow the Cisco UCM to trust the Expressway-C and establish a TLS connection, the administrator will upload the Expressway server certificate to the trust store. To which trust store must the certificate be uploaded?

Options:

A.

tomcat-trust

B.

CallManager-trust

C.

TVS-trust

D.

ipsec-trust

Question 55

An Expressway-E is configured using a single NIC with NAT.

How must the Expressway-C traversal client zone be configured to connect to the Expressway-E?

Options:

A.

TLS verify must be enabled.

B.

The zone profile must be set to default.

C.

The peer address must be the Expressway-E NAT address.

D.

The peer address must be the Expressway-E LAN 1 IP address.

Question 56

What is configured on the Expressway-E to successfully route calls from Expressway-C on the internal network to the Internet?

Options:

A.

Application layer gateway is enabled to bridge the media traffic.

B.

A static NAT route is added to the firewall to bridge the two networks.

C.

The Expressway-E is enabled for Dual-NIC capability.

D.

The Expressway-E is enabled for interworking

Question 57

An engineer must fix broken SSH tunnels between Expressway-C (192.168.10.5) and Expressway-E (192.168.20.5). The engineer is advised that the packet capture shows the required packets for the SSH tunnels leaving the Expressway-C but not reaching the Expressway-E. Which firewall configuration must the engineer allow to resolve this issue?

Options:

A.

port 2222 from Expressway-E to Expressway-C

B.

port 7001 from Expressway-C to Expressway-E

C.

port 7001 from Expressway-E to Expressway-C

D.

port 2222 from Expressway-C to Expressway-E

Question 58

An administrator is enabling Mobile and Remote Access login for the Cisco UCM registration domain cisco.com. Phones are registered with a Cisco UCM phone security profile name of securephone.cisco.com. Which two subject alternative names must be configured? (Choose two.)

Options:

A.

Securephone.cisco.com on the CallManager certificate

B.

cisco.com on the Expressway-C certificate

C.

Securephone.cisco.com on the Expressway-E certificate

D.

cisco.com on the Expressway-E certificate

E.

Securephone.cisco.com on the Expressway-C certificate

Question 59

A network engineer is configuring Mobile and Remote Access for the environment and must add the Certificate Authority into the Expressways. How does the engineer perform this action?

Options:

A.

Go to Maintenance > Trusted CA certificate > Security and upload the trusted Certificate Authority certificates.

B.

Go to Maintenance > Security > Trusted CA certificate and upload the trusted Certificate Authority certificates.

C.

Go to Maintenance > Tools > Security > Certificates > Trusted CA certificate and upload the trusted Certificate Authority certificates.

D.

Go to Maintenance > Tools > Security > Trusted CA certificate and upload the trusted Certificate Authority certificates.

Question 60

Cisco media traversal technology has enabled a secure environment where internal video endpoints call and receive calls from external video endpoints. How does the Expressway-C and Expressway-E communicate?

Options:

A.

Expressway-C establishes an outgoing request to Expressway-E, enabling the Expressway-E in the DMZ to notify the internal Expressway-C of an incoming call from an external endpoint.

B.

Internal endpoints are registered to Expressway-E in the DMZ. Expressway-C, which is also in the DMZ, will receive and make calls on behalf of Expressway-E because they are in the same network.

C.

Expressway-E establishes an outgoing request to Expressway-C, enabling the Expressway-C in the DMZ to notify the internal Expressway-E of an incoming call from an external endpoint.

D.

Internal endpoints are registered to Expressway-C in the DMZ. Expressway-E, which is also in the DMZ, will receive and make calls on behalf of Expressway-C because they are in the same network.

Question 61

Refer to the exhibit.

An ISDN gateway is registered to Expressway-C with a prefix of 9 and/or it has a neighbor zone specified that routes calls starting with a 9.

Which value should be entered into the "Source" field to prevent toll fraud regardless at origin of the call?

Options:

A.

Traversal Zone

B.

Any

C.

Neighbor Zone

D.

All

Question 62

Where is encryption enabled in a Cisco collaboration environment for dedicated hardware-based video endpoint calls?

Options:

A.

Set enforce encryption in Cisco Expressway-C under Dial Plan Configuration.

B.

Set enforce encryption in regions in Cisco UCM.

C.

Set enforce encryption on every single endpoint.

D.

Ensure that Cisco UCM is set to restricted mode.

Page: 1 / 21
Total 207 questions