Summer Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: myex65

Home > Cisco > CCNP Collaboration > 300-820

300-820 Implementing Cisco Collaboration Cloud and Edge Solutions (300-820 CLCEI) Question and Answers

Question # 4

Which attribute in the SDP for a call is affected by the static NAT address configuration in an Expressway-E?

A.

connection

B.

name

C.

version

D.

bandwidth

Full Access
Question # 5

Which interworking option must be used on the Expressway for it to act as a SIP/H.323 gateway when no endpoint is registered?

A.

enabled

B.

registered only

C.

off

D.

on

Full Access
Question # 6

A video device registered with Cisco UCM failed to make an outbound B2B call. From Expressway-C diagnostic logs, an engineer found that the destination pattern is “john@example.com:5061”, and the call was dropped with a 404 response code from Expressway-C. The search rule intended for this call-in Expressway-C is configured for Alias Pattern Match, Pattern type “Suffix,” and Pattern “example.com”. How must the configuration be changed to allow the call?

A.

Update the route pattern in Cisco UCM to send calls to "example.com" to the correct port.

B.

Create a transform on Expressway-C to strip port numbers.

C.

Create a call policy rule on Expressway-E to allow calls to port 5061.

D.

Update the call policy list in Expressway-C to allow calls to "example.com".

Full Access
Question # 7

A Jabber user is being prompted to trust the Expressway-E certificate when using Mobile and Remote Access. The administrator has validated that the Expressway-E certificate is being trusted by the machine running the Jabber client.

What else can be done to solve this problem?

A.

Create a new CSR with new information on the SAN field.

B.

Include Cisco Unified Communications Manager registration domain in the Expressway-E certificate as a SAN.

C.

Change the domain name.

D.

Change the FQDN of the Expressway.

Full Access
Question # 8

When deploying an Expressway Core and Expressway Edge cluster for mobile and remote access, which TLS verify subject name must be configured on the Expressway-E UC traversal zone?

A.

Webex CUSP Cluster Name

B.

Expressway-E Cluster Name

C.

Cisco Unified Communications Manager Publisher FQDN

D.

Expressway-C Cluster Name

Full Access
Question # 9

What is the last step for domain management in Cisco Webex Control Hub if an engineer adds users already signed in with the company domain?

A.

Publish a domain.

B.

Add a domain.

C.

Verify a domain.

D.

Claim a domain.

Full Access
Question # 10

Refer to the exhibit.

Mobile and remote access is being added to an existing B2B deployment and is failing.

When the administrator looks at the alarms on the Expressway-C, the snippets are shown. Which configuration action should the administrator take to fix this issue?

A.

The listening port on the Expressway-C for SIP TCP must be changed to a value other than 5060

B.

The listening port on the Expressway-C for SIP TLS must be changed to a value other than 5061

C.

The listening port on the Cisco UCM for the Expressway-C SIP trunk must be changed to something other than 5060 or 5061

D.

The listening port on the Cisco UCM for the Expressway-C SIP trunk is set to something other than 5060 or 5061. It must be set to 5060 for insecure and 5061 for secure SIP

Full Access
Question # 11

An administrator must configure the DNS SRV records for Mobile and Remote Access for a company with the domain example.com, the Expressway-E FQDN is ExpE.example.com, and the Expressway-C FQDN is Exp-C.example.com. What must the administrator configure to allow external clients to discover the Expressway-E server?

A.

SRV record _collab-edge._tls.example.com that resolves to ExpE.example.com on port 8443

B.

SRV record _cisco-uds._tcp.example.com that resolves to ExpE.example.com on port 5061

C.

SRV record _cisco-uds._tcp.example.com that resolves to ExpC.example.com on port 8443

D.

SRV record _collab-edge._tls.example.com that resolves ta ExpE.example.com on port 5061

Full Access
Question # 12

A company has a single Expressway-E that exhibits high resource utilization. An engineer checks the logs and finds numerous fraudulent attempts from sip:200@cisco.com. Where must the engineer go to configure a call policy rule and block the desired URI?

A.

Call History Configuration > Call Policy > Rules

B.

Configuration > Call History > Policy > Rules

C.

Configuration > Call Policy > Rules

D.

Configuration > Policy > Inbound > Rules

Full Access
Question # 13

A company identifies a fraudulent toil situation. An engineer reviews the Cisco UCM call detail records and discovers that fraudulent calls originate from a Cisco Expressway-C server and are then routed to a 10-digit PSTN number. What must be configured to limit incoming Expressway calls to the internal Cisco UCM range of extensions 5XXXX?

A.

calling search space that contains all the partitions on the Unified Communications Manager SIP trunk to Expressway

B.

call policy rule from the DNS zone to allow a destination regex pattern of \d.*@abc.com

C.

unique search rule with a regex pattern of [5]\d{4}@abc.com that targets the neighbor zone

D.

call policy rule from the DNS zone to allow a destination regex pattern of .*@abc.com

Full Access
Question # 14

Refer to the exhibit.

A new neighbor zone is added for a new Cisco Meeting Server, but the zone is showing a

SIP status of failed from the time the zone it was created. What should be done to resolve this issue?

A.

The search rule must be changed to continue on match

B.

The existing zone using ID 7 must be deleted

C.

More bandwidth must be added to the appropriate pipes

D.

The underlying DNS issue must be resolved

Full Access
Question # 15

An engineer is deploying an Expressway solution for the SIP domain Cisco.com. Which SRV record should be configured in the public DNS to support inbound B2B calls?

A.

_collab-edge._tls.cisco.com

B.

_cisco-uds._tcp.cisco.com

C.

_sip._tcp.cisco.com

D.

_cuplogin._tcp.cisco.com

Full Access
Question # 16

Which protocol should be used to verify the connectivity for different media paths found during a call using ICE?

A.

STUN

B.

RTP

C.

SNMP

D.

TURN

Full Access
Question # 17

Which two internal SIP endpoints behind a firewall place calls to external devices? (Choose two.)

A.

An Expressway-C communicates with the internal endpoint and forwards the media to and from an Expressway-E.

B.

A Cisco Endpoint is configured with a publicly routable static NAT SIP address to advertise instead of is private IP address.

C.

An Expressway-C communicates directly with the remote party using the ICE protocol

D.

An Expressway-E is used as a VPN server to allow remote SIP edge servers to connect calls

E.

An Expressway-C rewrites the SIP SDP to advertise its own IP address to the external party.

Full Access
Question # 18

What allows endpoints behind a NAT to discover the paths through which they will pass media?

A.

RTP

B.

TLS

C.

SNMP

D.

ICE

Full Access
Question # 19

Drag and drop the required SAN field items from the left onto the features within the server categories on the right.

Full Access
Question # 20

An engineer is deploying Mobile and Remote Access to allow external Cisco Jabber users to sign into a Cisco UCM cluster via Cisco Expressways. The users will sign-in in the format username@cisco.com. Contact photos for Jabber are hosted on a webserver with the FQDN of phonebook cisco.com. Which configuration must be completed to allow external Jabber users to see contact photos?

A.

An HTTP allow list entry must be made on the Expressway-E for phonebook cisco.com.

B.

A SIP allow list entry must be made on the Expressway-E for .*@cisco.com.

C.

An HTTP allow list entry must be made on the Expressway-C for phonebook cisco.com.

D.

A SIP allow list entry must be made on the Expressway-C for .*@cisco.com.

Full Access
Question # 21

Refer to the exhibit.

Cisco Unified Communications Manager routes the call via the Webex Meetings route list and route group to the Video Mesh cluster Node#1 in the Video Mesh cluster is hosting the meeting and has reached full capacity, but other nodes in the cluster still have spare capacity.

What happens to the participant's call?

A.

Another node in the cluster is used and an intra-cluster cascade between the two Video Mesh nodes is formed.

B.

The call is queued.

C.

The call fails.

D.

Another node in the cluster is used and an intra-cluster cascade between Webex and the new Video Mesh node is formed.

Full Access
Question # 22

Which role does Call Policy play when preventing toll fraud on Expressways?

A.

It controls which calls are allowed, which calls are rejected, and which calls are redirected to a different destination.

B.

It changes the calling and called number on a call.

C.

It changes the audio protocol used by a call through Expressways.

D.

It changes the audio codec used in a call through Expressways.

Full Access
Question # 23

When determining why Mobile and Remote Access to Cisco TelePresence equipment does not work anymore for an organization. There are several administrators and configuration changes could have happened without anyone knowing. Internal communication seems to be working, but no external system can register or call anywhere. Gathering symptoms, you also discover that no internal systems can call out either.

What is TraversalZone missing that causes this issue?

A.

link to the DefaultZone

B.

pipe to the DefaultZone

C.

SIP trunk to the DefaultZone

D.

route pattern to the DefaultZone

Full Access
Question # 24

An engineer learns from an end user that calls from outside the company are not being received. Calls are being made to other businesses outside of the company on video using URL addresses. The change management log shows no changes in the configuration of the collaboration solutions. The engineer examines the endpoint, which seems to be registered to the Cisco UCM, and the SIP trunk between the Cisco UCM and sees that the Expressway is also up. In addition, the traversal link shows no errors between the Expressways. Which action must the engineer take to troubleshoot this issue?

A.

On the Cisco UCM, run the Real-Time Monitoring Tool to see if any incoming calls fail.

B.

On the Expressway-E, run diagnostic logging under maintenance to see if any requests reach the system.

C.

On the Expressway-E, check the NTP settings to ensure that TLS will be able to terminate. If the clock is out of sync, incoming calls from other working systems would work bur not outgoing calls from the company.

D.

On the Expressway-C, run a network log under administrative tools to see if any requests reach the system.

Full Access
Question # 25

Which statement correctly describes links and pipes in Cisco Expressway?

A.

A maximum of one pipe can be applied to a link.

B.

A call between two endpoints in the same subzone or zone fails if there is no pipe between the endpoints.

C.

A call between two endpoints in the same subzone or zone fails if there is no link between the endpoints.

D.

The lower bandwidth restriction is applied to calls over a link that is associated to two pipes.

Full Access
Question # 26

Users in the Cisco Webex collaboration environment want to be able to use @webex when scheduling a Webex meeting from their Outlook client connected to Office365. Which configuration meets this requirement?

A.

Add an O365 tenant in the admin pages of Webex as a Microsoft 385 Global administrator.

B.

Add the Webex domain in the calendar integration services in the admin interface for Microsoft Exchange Online.

C.

Enable user onboarding for each user in the Webex admin interface. Each user will then authorize Webex to read only their calendar in a secure manner.

D.

Add an O365 tenant in the admin pages of Webex as a Webex site administrator.

Full Access
Question # 27

Where is encryption enabled in a Cisco collaboration environment for dedicated hardware-based video endpoint calls?

A.

Set enforce encryption in Cisco Expressway-C under Dial Plan Configuration.

B.

Set enforce encryption in regions in Cisco UCM.

C.

Set enforce encryption on every single endpoint.

D.

Ensure that Cisco UCM is set to restricted mode.

Full Access
Question # 28

When an Expressway-E is configured for static NAT, which Session Description Protocol attribute is modified to reflect the NAT address?

A.

SDP b-line

B.

SIP record route

C.

SDP c-line

D.

SDP m-line

Full Access
Question # 29

Refer to the exhibit. An engineer is configuring Cisco Expressway-C to discover Cisco UCM by using an IP address and a TCP connection. After the configuration is saved, errors occur.

Which two changes must be made to resolve the errors? (Choose two.)

A.

Configure an application user with Cisco Computer Telephony Integration-enabled privileges in Cisco UCM.

B.

Configure an application user with Administrative XML privileges in Cisco UCM.

C.

Upload a valid Cisco Tomcat certificate from the Cisco UCM to Expressway-C.

D.

Set TLS verify mode to Off.

E.

Configure an HTTP allow list that contains the Cisco UCM

Full Access
Question # 30

A company is installing Cisco Collaboration infrastructure and one of the requirements is that they must be able to communicate with many external parties that are using H.323 and SIP. Internally they want to register the endpoints only on SIP.

Which functionality would describe the feature that needs to be enabled and where to achieve this?

A.

Interworking in Expressway-C

B.

Transcoding in Cisco Unified Communications Manager

C.

Transcoding in Expressway-C

D.

Interworking in Cisco Unified Communications Manager

Full Access
Question # 31

Which two protocols are supported on Expressway Zones? (Choose two.)

A.

SIP

B.

H.248

C.

MGCP

D.

SCCP

E.

H.323

Full Access
Question # 32

What is a description of an Interactive Connectivity Establishment?

A.

It is used by B2BUA to keep the firewall ports opened for inbound/outbound calls.

B.

It allows Mobile and Remote Access endpoints to connect video calls signaling peer-to-peer.

C.

It allows calling external endpoints with reduced overhead under VPN connections.

D.

It is used to find the best media path between network elements in traversal calls.

Full Access
Question # 33

Which mechanism does TLS use to validate identity?

A.

server certificate

B.

shared secret

C.

username and a password

D.

IP address of the peer

Full Access
Question # 34

Employees at company A must call employees at company B in an extension range of 4XXX@companyB.com. Both companies have a Cisco collaboration infrastructure. All required zones are configured in Cisco Expressways at company A. What must be configured on the Expressway at company A to enable outbound B2B calls?

A.

search rule with a regex pattern of [4]\d{3}@companyB\.com that targets the DNS zone

B.

search rule with a suffix pattern of *.@companyB.com that targets the neighbor zone

C.

call policy rule from the DNS zone to allow a destination pattern of 4[1-9]@companyB.com

D.

call policy rule from the neighbor zone to allow a destination pattern of 4[1-9]@companyB.com

Full Access
Question # 35

After Mobile and Remote Access is deployed with automatic service discovery, end users encounter the error “Cannot communicate with the server” when they attempt to log in to Cisco Jabber 14.0 using the company email address from within the company network. Which action must an administrator take to resolve this challenge?

A.

Create _collab-edge._tcp DNS SRV record in the internal DNS.

B.

Create _cisco-uds._tcp DNS SRV record in the internal DNS server.

C.

Create _collab-edge._tls DNS SRV record in the public DNS.

D.

Create _cisco-uds._tcp DNS SRV record in the public DNS server.

Full Access
Question # 36

A Webex administrator is configuring the Webex Control Hub to enable enterprise users to sign into Webex securely by authenticating to the IdP of the organization. To conform to the SAML specification, to what can the NameID format be set?

A.

urn:oasis:names:tc:SAML:2.0:nameid-format:unspecified

B.

urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress

C.

urn:oasis:names:tc:SAML:2.0:nameid-format:transient

D.

urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress

Full Access
Question # 37

What are the steps to access the Service Setup Wizard during the first setup of the Expressway server to license the server?

A.

Factory reset the Expressway server to pass from Smart Licensing to PAK-based licensing.

B.

From the GUI of the Expressway server, go to Status> Overview> Run service setup.

C.

Factory reset the Expressway server to pass from Expressway-C to Expressway-E.

D.

From the GUI of the Expressway server, go to Maintenance> Option keys> First Setup Wizard.

Full Access
Question # 38

Refer to the exhibit.

Calls to locally registered endpoints are failing. At present, there are two endpoints

registered locally to this Expressway. An H.323 endpoint with an alias of “EndpointA” is registered, and a SIP endpoint with an alias of “EndpointB@pod1.local” is also registered. How is this issue resolved?

A.

The dialplan must be redesigned to use the transforms to convert the alias into SIP URI format and then use separate search rules for each format that needs to be dialed within the local zone.

B.

The calls are failing because there are insufficient licenses. Additional licenses must be installed for the Expressway to route these calls.

C.

The current search rule does not match the call, so the search rule must be modified to include a SIP Variant of “Standards-Based”.

D.

Calling parties are placing calls with the wrong domain. End-users must be instructed not to use the

pod1.local domain as that is owned by the local system. Calls to any other domain would work.

Full Access
Question # 39

An organization has a domain name of example.com. Which two SRV records are valid for a SIP and H 323 communication? (Choose two)

A.

_collab-edge._tls.example.com

B.

_sips_tcp.example.com

C.

_h323ls_tcp.example.com

D.

_h323ls._udp.example.com

E.

_sips._udp.example.com

Full Access
Question # 40

What is the name of the Webex core service that delivers group messaging, one-to-one messaging, presence, and file sharing?

A.

Cisco Webex Messaging

B.

Cisco Webex App

C.

Cisco Webex ONE

D.

Cisco Jabber Online

Full Access
Question # 41

Refer to the exhibit.

What is the result of a transformation applied to alias 88514?

A.

98851@ccnpcollab.com

B.

88513@ccnpcollab com

C.

88514@ccnpcollab.com

D.

88515@ccnpcollab.com

Full Access
Question # 42

Refer to the exhibit. A collaboration engineer is configuring Cisco Expressway for B2B calling. The engineer must allow inbound calls to be routed to Cisco UCM. The traffic must be unencrypted between the Expressway-C and the Cisco UCM cluster. Which configuration correctly implements the zone?

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 43

Refer to the exhibit. The web server is set up to store contact photos and the Cisco Jabber-config.xml file is updated for all clients. After these changes, Jabber for Windows users cannot view the contact photos when they are connected via Mobile and Remote Access. Which action resolves the issue?

A.

Update the “PhotoUriWithToken’ entry to “Https”.

B.

Update the contact photos to “png”.

C.

Add the web-server address within the HTTP server allow list on the Expressway-C.

D.

Add the web-server address within the HTTP server allow list on the Expressway-E.

Full Access
Question # 44

Refer to the exhibit. After hardening the Cisco Expressway, an engineer noticed this error in the logs HTTP error 429 "Too Many Requests,” and users report that authentication is not possible on more than two devices. What must the engineer increase to correct the issue?

A.

maximum authorizations per period

B.

credentials refresh interval

C.

rate control period

D.

credentials cleanup interval

Full Access
Question # 45

An Expressway pairs deployed for Mobile and Remote Access. An administrator installs a new server certificate on the Expressway-E. After installing the new certificate, the UC Traversal zone between Expressway-C and Expressway-E is active. Still, Jabber Mobile and Remote Access clients cannot log in over the Expressway. The certificate Common Name is the FQDN of Expressway-E, “expe01 example.com”, and the certificate contains no additional names. Which Subject Alternate Name must be added to the certificate to allow Jabber Mobile and Remote Access clients to log in successfully?

A.

FQDN of the Expressway-C, “expc01.example.local”

B.

registration domain, “example.com” or “collab-edge.example.com”

C.

Cisco UCM cluster FQDN, “cucmcluster.example.local”

D.

FQDN of the Expressway-E, “expe01.example.com”

Full Access
Question # 46

An organization wants to be able to call IP addresses and URI addresses. An engineer must configure Cisco Expressways to manage this request from the endpoints in the organization. How would the engineer configure the Expressways to allow these calls to be completed to external IP addresses?

A.

Set calls to unknown IP addresses to direct on the Cisco Expressways, and add a search rule on the Expressway-E

B.

Set calls to unknown IP addresses to indirect on the Cisco Expressways, and add a search rule on the Expressway-E

C.

Use search rules to manage calls to IP addresses, and the direct/indirect setting on the Expressway is used as a fallback only if the search rules do not exist

D.

Set calls to unknown IP addresses to indirect on the Expressway-C and direct on the Expressway-E, and add a search rule on the Expressway-E

Full Access
Question # 47

Refer to the exhibit. An engineer is deploying mobile and remote access in an environment that already had functioning Business to Business calling. Mobile and remote access SIP registrations are failing. To troubleshoot, SIP logs were collected. How is this issue resolved?

A.

Change the SIP profile on the SIP trunk for the Expressway-E to Standard SIP Profile for TelePresence Endpoint

B.

Change the “Incoming Port” in the SIP Trunk Security Profile for the Expressway-C to not match SIP line registrations

C.

Enable autoregistration for the appropriate DN range on the Cisco UCM servers running the CallManager service

D.

Write a custom normalization script since the “vcs-interop” normalization script does not allow registrations

Full Access
Question # 48

An engineer must review a new traversal zone that is not establishing a successful connection between Expressway-C and Expressway-E. When the event log page on the Expressway-E is reviewed, an authentication failure is found with the detail “user not found”. Which two actions must the engineer take to resolve the issue? (Choose two.)

A.

Disable TLS verification on the Expressway-E.

B.

Ensure that the authentication credentials configured on both zones to match.

C.

Ensure that LDAP is properly configured and synchronized on the Expressway-E.

D.

Ensure that the authentication credentials exist on the Expressway-E local database.

E.

Ensure that the authentication credentials exist on the Expressway-C local database.

Full Access
Question # 49

Which describes what could done on the Expressway-E to successfully route calls from Expressway-C on the internal network to the Internet?

A.

Application layer gateway could be enabled to bridge the media traffic.

B.

A static NAT route could be added to the firewall to bridge the two networks.

C.

The Expressway-E could be enabled for Dual-NIC capability.

D.

The Expressway-E could be enabled for interworking.

Full Access
Question # 50

A company has an on-premises Cisco collaboration cluster that contains Cisco UCM, IM and Presence, and Cisco Webex in the cloud. The company wants to integrate the on-premises infrastructure with Webex to enable interoperability with the Webex App. An engineer already configured the cluster in Cisco UCM, IM and Presence, and the organization in the Webex Control Hub. Which action must the engineer take to complete the configuration?

A.

Deploy Directory Connector.

B.

Open the TCP 443 port from IM and Presence to Webex Cloud.

C.

Deploy a Webex Device Connector.

D.

Deploy a Cisco Expressway Message Connector host.

Full Access
Question # 51

When configuring a Cisco Expressway solution and need to design the dial plan with various rules for URIs and numbers coming through the device. To do so, it is important that some dial plan rules are applied in a certain order. When configuring the transform section, you must know the range of the priorities.

Which range is correct?

A.

any number in the drop-down menu

B.

any number in the dialog box

C.

any number between 1-128

D.

any number between 1-65534

Full Access
Question # 52

Refer to the exhibit. An administrator troubleshoots Cisco Jabber users experiencing issues when trying to log in and notices errors in the Jabber problem report log. The administrator also sees that the Intercluster Sync Agent service is not running on the IM and Presence server. Why is the Jabber client unable to sign in?

A.

The XmppSDK.dll file is missing from the IM and Presence server.

B.

The XMPP stanza is not using the correct ID for the Jabber client.

C.

The XMPP bind failed on the IM and Presence server.

D.

The Jabber client refused the XMPP bind connection.

Full Access
Question # 53

Cisco media traversal technology has enabled a secure environment where internal video endpoints call and receive calls from external video endpoints. How does the Expressway-C and Expressway-E communicate?

A.

Expressway-C establishes an outgoing request to Expressway-E, enabling the Expressway-E in the DMZ to notify the internal Expressway-C of an incoming call from an external endpoint.

B.

Internal endpoints are registered to Expressway-E in the DMZ. Expressway-C, which is also in the DMZ, will receive and make calls on behalf of Expressway-E because they are in the same network.

C.

Expressway-E establishes an outgoing request to Expressway-C, enabling the Expressway-C in the DMZ to notify the internal Expressway-E of an incoming call from an external endpoint.

D.

Internal endpoints are registered to Expressway-C in the DMZ. Expressway-E, which is also in the DMZ, will receive and make calls on behalf of Expressway-C because they are in the same network.

Full Access
Question # 54

With QoS enabled, which two statements about the Cisco Webex Video Mesh Node signaling and media traffic are true? (Choose two.)

A.

From VMN to CUCM SIP endpoints, the source UDP ports from 52500 to 62999 is used for audio traffic.

B.

From VMN to Webex Teams clients, the source UDP port 5004 is used for video traffic.

C.

From Webex cloud to VMN, the source UDP port 9000 is used for audio traffic.

D.

From VMN to video endpoints, the destination UDP port 5004 is used for audio traffic.

E.

From VMN to Webex cloud, the destination UDP port 9000 is used for video traffic.

Full Access
Question # 55

Refer to the exhibit. When users sign in to Cisco Jabber through Mobile and Remote Access, they cannot see their own photo or the photo of their contacts next to each name. Which action must be taken in Cisco Expressway-C to resolve the issue?

A.

Add an HTTP allow list for the Instant Message and Presence server.

B.

Add an allow call policy rule from the Cisco UCM traversal zone.

C.

Upload the missing Instant Messaging and Presence server certificate to fix the connection to its server.

D.

Add an HTTP allow list for the web server that contains the photos.

Full Access
Question # 56

During the deployment of a Cisco Webex Video Mesh, where do on-premises SIP endpoints send signaling?

A.

On-premises endpoints cannot participate in Cisco Webex Video Mesh

B.

to the cloud

C.

to the switching services

D.

to the call control environment (Unified CM or Expressway)

Full Access
Question # 57

A Cisco Webex Hybrid Video Mesh Node can be installed in the DMZ and on the internal network.

Which statement is true?

A.

Webex Cloud supports either a DMZ-based Mesh Node for security or an internal-based Mesh Node for media control only.

B.

Installing a Video Mesh Node in the DMZ requires you to open TCP and UDP port 4444 in your internal firewall for full clustering functionality.

C.

Installing a Video Mesh Node in the DMZ requires the external firewall to allow UDP traffic from ANY port to the address of the Video Mesh Nodes via port 5004.

D.

Using internal Video Mesh Node also works due to Mobile and Remote Access setup for Webex Teams clients. A DMZ node is added for extra security.

Full Access
Question # 58

What happens to the encrypted signaling traffic of a collaboration device if you place it inside a firewall with private IP addresses and try to make a call over IP without any collaboration infrastructure?

A.

The signaling makes it back to the endpoint because the firewall is an application layer gateway and provides address translation.

B.

Encrypted IP traffic for collaboration devices always is trusted by the firewall.

C.

The signaling does not make it back to the endpoint because the firewall cannot inspect encrypted traffic.

D.

The signaling makes it back to the endpoint because the endpoint sent the private address to the external endpoint.

Full Access
Question # 59

Refer to the exhibit.

In an environment SIP devices are registered to CUCM and H.323 devices to VCS. What would be required to enable these calls to setup correctly?

A.

Create a presearch transform.

B.

Change the domain of SIP endpoint A to cisco.com.

C.

Disable SIP in the external zone.

D.

Change the interworking mode to On.

Full Access
Question # 60

What is a key configuration requirement for Hybrid Message Service High Availability deployment with multiple IM and Presence clusters?

A.

You must have the Intercluster Sync Agent working across your IM and Presence clusters.

B.

You must have the Intercluster Lookup Service working across all of your IM and Presence clusters.

C.

Your IM and Presence Service clusters must have Multiple Device Messaging disabled.

D.

AXL service should be activated only on the publisher of each IM and Presence cluster.

Full Access
Question # 61

Refer to the exhibit. When a user tries to sign in to the Cisco Jabber client through Mobile and Remote Access, they receive this error message: “Cannot communicate with the server.” The external DNS server is configured with the SRV records listed in the exhibit.

What is the cause of the issue?

A.

The collab-edge DNS record must be added to the DNS server and the _cisco-uds DNS record must be removed.

B.

A Cisco CSF device must be configured in UC for the user and the _cisco-uds DNS record must be removed.

C.

The HTTP allow list is not allowing communication with the Instant Message and Presence server.

D.

The _sips DNS record must target expE-pub.cll-collab.internal and the _cisco-uds DNS record must be removed.

Full Access
Question # 62

An Expressway Server has both network protocols (IPv4 and IPv6) enabled. Which two behaviors are correct? (Choose two.)

A.

If the calling endpoint is on an IPv4-Only network and the called endpoint is on an IPV6-Only network, a NAT64 device must convert the IPv4 addresses to IPv6 addresses.

B.

Endpoints register with either IPv4 or IPv6 addresses, but dual-stack endpoints choose IPv6 protocol by default.

C.

If the calling endpoint is on an IPv4-Only network and the called endpoint is on an IPv6-Only network, the Expressway Server act as a gateway and convert the two protocol versions.

D.

Endpoints register only with IPv6 addresses on an Expressway Server with IPv6 protocol enabled regardless of the state of IPv4 protocol.

E.

Endpoints register with either IPv4 or IPv6 addresses, and endpoints decide which protocol to use by the format of the configured Expressway Server IP address.

Full Access