Deck 31: Implementing Cisco Collaboration Conferencing

Question 1

What happens to the encrypted signaling traffic of a collaboration device if you place it inside a firewall with private IP addresses and try to make a call over IP without any collaboration infrastructure?

A) The signaling makes it back to the endpoint because the firewall is an application layer gateway and provides address translation.
B) Encrypted IP traffic for collaboration devices always is trusted by the firewall.
C) The signaling does not make it back to the endpoint because the firewall cannot inspect encrypted traffic.
D) The signaling makes it back to the endpoint because the endpoint sent the private address to the external endpoint.

Answer 1

Encrypted IP traffic for collaboration devices always is trusted by the firewall.

Question 2

Which attribute in the SDP for a call is affected by the static NAT address configuration in an Expressway-E?

A) connection
B) name
C) version
D) bandwidth

Answer 2

name

Question 3

A company has enabled ICE to optimize call flows and improve video quality between their Cisco Collaboration endpoints internally and externally. For which reason would you see activity on the TURN server when a call is established between two external endpoints?

A) The video call is using encryption, which is not supported by ICE with CUCM 12.5
B) ICE cannot reduce the packet loss on the link
C) A STUN cannot punch holes in the firewall
D) The video call is using 4K resolution, which is not supported by ICE with CUCM 12.5

Answer 3

The video call is using encryption, which is not supported by ICE with CUCM 12.5

Question 4

What is the purpose of a transform in the Expressway server?

A) A transform has the function as a neighbor zone in the Expressway. It creates a connection with another server.
B) A transform changes the audio codec when the call goes through the Expressway.
C) A transform is used to route calls to a destination.
D) A transform changes an alias that matches certain criteria into another alias.

Question 5

When configuring a Cisco Expressway solution and need to design the dial plan with various rules for URIs and numbers coming through the device. To do so, it is important that some dial plan rules are applied in a certain order. When configuring the transform section, you must know the range of the priorities. Which range is correct?

A) any number in the drop-down menu
B) any number in the dialog box
C) any number between 1-128
D) any number between 1-65534

Question 6

Refer to the exhibit. What is the result of a transformation applied to alias 88514?

A) [e-mail]
B) 88513@ccnpcollab com
C) [e-mail]
D) [e-mail]

Question 7

What is the Cisco-recommended key length in bits for a Cisco Expressway certificate?

A) 1024
B) 2048
C) 4096
D) 8192

Question 8

When designing the call control on a Cisco Expressway Core, which is the sequence of dial plan functions?

A) transforms, CPL, user policy, search rules
B) search rules, zones, local zones
C) DNS zone, local zone, search rules
D) search rules, transforms

Question 9

Which statement about scheduling Expressway backups is true?

A) It is not supported on the application.
B) It is allowed from the application CLI of the Expressway only.
C) It is allowed from the application CLI and GUI of the Expressway.
D) It is allowed from the application GUI of the Expressway only.

Question 10

An organization with a domain name of example.com. Which two SRV records are valid for a SIP and H.323 communication? (Choose two.)

A) _sips._tcp.example.com
B) _sips._udp.example.com
C) _h323ls._udp.example com
D) _h323ls._tcp.example.com
E) _collab-edge._tls.example.com

Question 11

What are two reasons why port 8443 is unreachable from the Internet to the Expressway-E? (Choose two.)

A) The MRA license is missing on the Expressway-E.
B) The Unified Communications zone is down.
C) Transform is not configured on Expressway-E.
D) The SRV record for _cisco-uds is misconfigured.
E) The firewall is blocking the port.

Question 12

Refer to the exhibit. Which two numbers match the regular expression? (Choose two.)

A) d20d16d20d22
B) 2091652010224
C) 209165200225
D) d209d165d200d224
E) 209165200224

Question 13

Which describes what could done on the Expressway-E to successfully route calls from Expressway-C on the internal network to the Internet?

A) Application layer gateway could be enabled to bridge the media traffic.
B) A static NAT route could be added to the firewall to bridge the two networks.
C) The Expressway-E could be enabled for Dual-NIC capability.
D) The Expressway-E could be enabled for interworking.

Question 14

Between which two DTMF relay methods does the Expressway support interworking? (Choose two.)

A) unsolicited notify
B) RFC 2833
C) KPML
D) passthrough
E) F) 245 user input indication

Question 15

Which protocol should be used to verify the connectivity for different media paths found during a call using ICE?

A) STUN
B) RTP
C) SNMP
D) TURN

Question 16

Which SIP media encryption mode is applied by default for newly created zones in the Cisco Expressway?

A) Off
B) Best Effort
C) Auto
D) Force Encrypted

Question 17

A company already has a Cisco Unified Communications Manager for internal audio and video traffic, but it requires video communication with external partners and customers. It is important to ensure security for the deployment and the connectivity. What must be set up to enable this requirement?

A) Cisco Unified Border Element and Cisco ASA Firewall
B) Cisco Unified Border Element and Cisco Firepower Firewall
C) Cisco Expressway-C and Cisco Expressway-E
D) Cisco Expressway-C and Cisco Unified Border Element

Question 18

What is a key configuration requirement for Hybrid Message Service High Availability deployment with multiple IM and Presence clusters?

A) You must have the Intercluster Sync Agent working across your IM and Presence clusters.
B) You must have the Intercluster Lookup Service working across all of your IM and Presence clusters.
C) Your IM and Presence Service clusters must have Multiple Device Messaging disabled.
D) AXL service should be activated only on the publisher of each IM and Presence cluster.

Question 19

What allows endpoints behind a NAT to discover the paths through which they will pass media?

A) RTP
B) TLS
C) SNMP
D) ICE

Question 20

Which two types of information does Cisco Expressway back up? (Choose two.)

A) call records
B) log files
C) IP addresses
D) current call states
E) security certificates

Question 21

A Jabber user is being prompted to trust the Expressway-E certificate when using Mobile and Remote Access. The administrator has validated that the Expressway-E certificate is being trusted by the machine running the Jabber client. What else can be done to solve this problem?

A) Create a new CSR with new information on the SAN field.
B) Include Cisco Unified Communications Manager registration domain in the Expressway-E certificate as a SAN.
C) Change the domain name.
D) Change the FQDN of the Expressway.

Question 22

What it is the purpose of using ICE for Mobile and Remote Access endpoints in the Cisco Collaboration infrastructure?

A) ICE controls the bandwidth usage for Cisco Collaboration endpoints if the endpoints are located outside the company network.
B) ICE enables Cisco Collaboration endpoints to determine if there is direct connectivity between them.
C) ICE uses FAST updates to optimize the video quality in case of packet loss. This technology is available only from Cisco Unified CM version 11.5 and later.
D) ICE enablement allows for the Cisco Collaboration endpoint to register through Expressway servers to Cisco Unified Communications Manager behind a firewall.

Question 23

In a Mobile and Remote Access deployment, where must communications be encrypted with TLS?

A) Cisco Expressway-E and endpoints outside the enterprise
B) Cisco Expressway-C, Cisco Unified Communications Manager, and IM&P
C) Cisco Expressway-C, Cisco Expressway-E, and Cisco Unified Communications Manager
D) Cisco Expressway-C, Cisco Expressway-E, and endpoints outside the enterprise

Question 24

Refer to the exhibit. The firewall has been configured from NAT 192.168.108.2 to 100.64.0.1. Which configuration changes are needed for an Expressway-E with dual network interfaces?

A)
B)
C)
D)

Question 25

When deploying an Expressway Core and Expressway Edge cluster for mobile and remote access, which TLS verity subject name must be configured on the Expressway-E UC traversal zone?

A) Webex CUSP Cluster Name
B) Expressway-E Cluster Name
C) Cisco Unified Communications Manager Publisher FQDN
D) Expressway-C Cluster Name

Question 26

Refer to the exhibit. Which inbound connection should an administrator configure on the outside firewall?

A) Media: UDP 36000 to 36011
B) XMPP: TCP 5222
C) SIP: TCP 5061
D) HTTPS (tunneled over SSH between C and E): TCP 2222

Question 27

An engineer wants to configure a zone on the Expressway-E to receive communications from the Expressway-C in order to allow inbound and outbound calls. How is the peer address configured on the Expressway-C when Expressway-E has only one NIC enabled and is using static NAT mode?

A) Expressway-E DHCP
B) Cisco UCM FQDN
C) Cisco UCM DHCP
D) Expressway-E FQDN

Question 28

Refer to the exhibit. Which description of the transformation is true?

A) It converts [e-mail]: to [e-mail]
B) It changes all patterns that begin with [e-mail]: to [e-mail]
C) It changes [e-mail]: to [e-mail]
D) It converts [e-mail]: to [e-mail]

Question 29

How does an administrator configure an Expressway to make sure an external caller cannot reach a specific internal address?

A) block the call with a call policy rule in the Expressway-E
B) add the specific URI in the firewall section of the Expressway and block it
C) configure FAC for the destination alias on the Expressway
D) add a search rule route all calls to the Cisco UCM

Question 30

An Expressway-E is configured using a single NIC with NAT. How must the Expressway-C traversal client zone be configured to connect to the Expressway-E?

A) TLS verify must be enabled.
B) The zone profile must be set to default.
C) The peer address must be the Expressway-E NAT address.
D) The peer address must be the Expressway-E LAN 1 IP address.

Question 31

Refer to the exhibit. When configuring a search rule that routes calls to a zone, what occurs when 13358 is dialed?

A) 13358 is replaced by 135, and then is sent to the local zone.
B) 13358 is replaced by 135 and remains in the same zone.
C) 13358 is replaced by 135, and then is sent to the traversal zone.
D) 13358 is sent directly to the traversal zone.

Question 32

Refer to the exhibit. An ISDN gateway is registered to Expressway-C with a prefix of 9 and/or it has a neighbor zone specified that routes calls starting with a 9. Which value should be entered into the "Source" field to prevent toll fraud regardless at origin of the call?

A) Traversal Zone
B) Any
C) Neighbor Zone
D) All

Question 33

Which step is required when configuring cloud and hybrid deployments for Cisco Jabber?

A) Add the Jabber user to Cisco Unity Connection.
B) Add the Jabber user to Expressway-E.
C) Add the Jabber user to Expressway-C.
D) Add Jabber Users to the Cisco Webex Administration Tool.

Question 34

Refer to the exhibit. An engineer is deploying mobile and remote access in an environment that already had functioning Business to Business calling. Mobile and remote access SIP registrations are failing. To troubleshoot, SIP logs were collected. How is this issue resolved?

A) Change the SIP profile on the SIP trunk for the Expressway-E to Standard SIP Profile for TelePresence Endpoint
B) Change the "Incoming Port" in the SIP Trunk Security Profile for the Expressway-C to not match SIP line registrations
C) Enable autoregistration for the appropriate DN range on the Cisco UCM servers running the CallManager service
D) Write a custom normalization script since the "vcs-interop" normalization script does not allow registrations

Question 35

Refer to the exhibit. An Expressway-C and Expressway-E are configured for B2B calling and the Expressway-E zone is set to TLS Verify Currently, calls do not reach the Expressway-C. The Traversal Client zone on the Expressway-C for B2B reports the information in the exhibit for the Peer 1 address. Which action resolves this error?

A) Configure the Expressway-C Traversal Client zone Peer 1 address with the fully qualified domain name of the Expressway-E.
B) Configure the Expressway-C Traversal Client zone transport protocol with TCP.
C) Add a server certificate to the Expressway-C that is signed by a certificate authority.
D) Add an intermediate certificate to the Expressway-C that is signed by a certificate authority.

Question 36

Refer to the exhibit. In an environment SIP devices are registered to CUCM and H.323 devices to VCS. What would be required to enable these calls to setup correctly?

A) Create a presearch transform.
B) Change the domain of SIP endpoint A to cisco.com.
C) Disable SIP in the external zone.
D) Change the interworking mode to On.

Question 37

Refer to the exhibit. Calls to locally registered endpoints are failing. At present, there are two endpoints registered locally to this Expressway. An H.323 endpoint with an alias of "EndpointA" is registered, and a SIP endpoint with an alias of "[e-mail]" is also registered. How is this issue resolved?

A) The dialplan must be redesigned to use the transforms to convert the alias into SIP URI format and then use separate search rules for each format that needs to be dialed within the local zone.
B) The calls are failing because there are insufficient licenses. Additional licenses must be installed for the Expressway to route these calls.
C) The current search rule does not match the call, so the search rule must be modified to include a SIP Variant of "Standards-Based".
D) Calling parties are placing calls with the wrong domain. End-users must be instructed not to use the pod1.local domain as that is owned by the local system. Calls to any other domain would work.

Question 38

Which entry in the public (external) DNS is valid to configure DNS SRV records for a Cisco Mobile and Remote Access solution?

A) _cisco-uds._tcp.
B) _cisco-mra._tls.
C) _collab-edge._tls.
D) _cisco-expwy._tls.

Question 39

Which step is taken when configuring a Cisco Expressway solution?

A) Configure the Expressway-E by using a non-traversal server zone.
B) Enable static NAT on the Expressway-E only.
C) Disable H.323 mode on the Expressway-E.
D) Enable H.323 H.460.19 demultiplexing mode on the Expressway-C.

Question 40

When determining why Mobile and Remote Access to Cisco TelePresence equipment does not work anymore for an organization. There are several administrators and configuration changes could have happened without anyone knowing. Internal communication seems to be working, but no external system can register or call anywhere. Gathering symptoms, you also discover that no internal systems can call out either. What is TraversalZone missing that causes this issue?

A) link to the DefaultZone
B) pipe to the DefaultZone
C) SIP trunk to the DefaultZone
D) route pattern to the DefaultZone

Question 41

The Cisco Webex Hybrid Message service is deployed geographically for separate Cisco Unified IM and Presence clusters. What must be configured in the Cisco Webex Control Hub to achieve this deployment?

A) geo-locations
B) distributed DNS
C) verified domains
D) resource groups

Question 42

A MRA deployment is being configured where one of the requirements is for registered Jabber users to pull directory photos from an internal server. What should be configured on the Expressway-C so that MRA registered clients reach this server?

A) The directory photo server FQDN must be added to the Expressway-C certificate
B) A search rule must be created to route the requests to Cisco UCM
C) A neighbor zone must be created to the directory photo server
D) The directory photo server must be added to the HTTP allow list

Question 43

When a Cisco Webex Video Mesh Node is configured for an organization, which process does the Webex Teams client use to discover the optimal bridging resource?

A) the lowest STUN round-trip delay to each node and cloud
B) a reachable Video Mesh Node and then overflows to the cloud, if needed
C) the SIP delay header during call setup
D) an HTTPS speed and latency test to each node and the cloud

Question 44

With QoS enabled, which two statements about the Cisco Webex Video Mesh Node signaling and media traffic are true? (Choose two.)

A) From VMN to CUCM SIP endpoints, the source UDP ports from 52500 to 62999 is used for audio traffic.
B) From VMN to Webex Teams clients, the source UDP port 5004 is used for video traffic.
C) From Webex cloud to VMN, the source UDP port 9000 is used for audio traffic.
D) From VMN to video endpoints, the destination UDP port 5004 is used for audio traffic.
E) From VMN to Webex cloud, the destination UDP port 9000 is used for video traffic.

Question 45

What is a requirement when configuring the Cisco Webex Hybrid Message account for accessing the API of the Cisco UCM IM and Presence Service?

A) Add a new end-user with the "Standard AXL API Access" role
B) Use an application user with only the "Standard CTI Allow Control of All Devices" role
C) Use an application user not the main administrator account with the "Standard AXL API Access" role
D) Use the main administrator account if it includes the "Standard AXL API Access" role

Question 46

Which zone is required between Expressway-E and Expressway-C in Mobile and Remote Access deployments?

A) Unified Communications traversal zone
B) neighbor zone
C) DNS zone
D) traversal zone

Question 47

Where are voice calls handled in a Cisco Jabber hybrid cloud-based deployment with Cisco Webex Platform Service?

A) Voice calls use Webex Calling platform for call control and use hybrid media nodes for local conferencing.
B) Voice calls use local media nodes to keep traffic internal for internal traffic and use Webex Calling for external calls.
C) Voice call use Cisco Unified Communications Manager for local calls and Webex Calling for external calls.
D) Voice calls use local Cisco Unified Communications Manager for all calls.

Question 48

Which two statements about Cisco Webex Video Mesh Nodes are true? (Choose two.)

A) When Expressway Core works with VMN clusters, Expressway Core decides which VMN is used for signaling/media connection.
B) Cloud-registered devices choose a VMN cluster based on the lowest STUN round trip delay.
C) The cascading traffic between VMN must bypass the firewall.
D) When Cisco Unified Communications Manager works with multiple VMNs, Cisco Unified CM decides which VMN is used for signaling connection.
E) A VMN can terminate a media connection while operating in maintenance mode.

Question 49

Refer to the exhibit. Cisco Unified Communications Manager routes the call via the Webex Meetings route list and route group to the Video Mesh cluster Node#1 in the Video Mesh cluster is hosting the meeting and has reached full capacity, but other nodes in the cluster still have spare capacity. What happens to the participant's call?

A) Another node in the cluster is used and an intra-cluster cascade between the two Video Mesh nodes is formed.
B) The call is queued.
C) The call fails.
D) Another node in the cluster is used and an intra-cluster cascade between Webex and the new Video Mesh node is formed.

Question 50

Which service is available in a cloud-based deployment using Cisco Webex Messenger?

A) Presence
B) Phone services
C) Voicemail
D) Call forward services

Question 51

A Cisco Webex Hybrid Video Mesh Node can be installed in the DMZ and on the internal network. Which statement is true?

A) Webex Cloud supports either a DMZ-based Mesh Node for security or an internal-based Mesh Node for media control only.
B) Installing a Video Mesh Node in the DMZ requires you to open TCP and UDP port 4444 in your internal firewall for full clustering functionality.
C) Installing a Video Mesh Node in the DMZ requires the external firewall to allow UDP traffic from ANY port to the address of the Video Mesh Nodes via port 5004.
D) Using internal Video Mesh Node also works due to Mobile and Remote Access setup for Webex Teams clients. A DMZ node is added for extra security.

Question 52

An organization wants to enable a Cisco Webex connector to synchronize all employees automatically with Cisco Webex instead of using a manual list. Where is the Webex Hybrid Directory Service configured?

A) Install Cisco Directory Connector on a Microsoft Windows Domain server and configure the software and Webex Control Hub.
B) Enable the directory service in Cisco Unified Communications Manager under Cisco Unified Serviceability and add the service in Webex Control Hub.
C) Enable the directory service on Cisco Expressway Edge for Office 365 or Cisco Expressway Core for internal Active Directory and add the service in Webex Control Hub.
D) Install the Cisco Express Connector and configure the device in Cisco Unified Communications Manager under Cisco Unified Serviceability and add the service in Webex Control Hub.

Question 53

Which step is required when configuring Cisco Webex Hybrid Message Service?

A) Register Expressway-C Connector Hosts to the Cisco Webex Cloud.
B) Register Expressway-C to Cisco Unified Communications Manager.
C) Add Expressway-C and Cisco United CM to the Cisco Webex Cloud.
D) Add Cisco Unity Connection to Expressway-E.

Question 54

Refer to the exhibit. If the Webex Teams device cannot connect to Video Mesh Cluster-1 because it is busy, which media node does the Webex Teams device connect to next?

A) Both Cloud Node US-EAST and US-WEST
B) Video Mesh Cluster-2
C) Cloud Node US-EAST
D) Cloud Node US-WEST

Question 55

Refer to the exhibit. Mobile Cisco Jabber cannot register with on-premises Cisco Unified Communications Manager using Mobile and Remote Access. Some logs were captured on Expressway Edge. Which action corrects this problem?

A) Ensure that the peer address does not match the Common Name on certificate.
B) Ensure that the _cisco-uds SRV record has been configured.
C) Ensure that the credential has been entered correctly.
D) Ensure that the SIP domains are added on Expressway Core.

Question 56

An administrator has been asked to configure Video Mesh signaling traffic to route through a proxy. Which is an available proxy type in the Video Mesh node configuration to support this deployment model?

A) Transparent Explicit Proxy
B) Transparent Inspecting Proxy
C) Reverse Proxy
D) Distorting Proxy

Question 57

Refer to the exhibit. Mobile and remote access is being added to an existing B2B deployment and is failing. When the administrator looks at the alarms on the Expressway-C, the snippets are shown. Which configuration action should the administrator take to fix this issue?

A) The listening port on the Expressway-C for SIP TCP must be changed to a value other than 5060
B) The listening port on the Expressway-C for SIP TLS must be changed to a value other than 5061
C) The listening port on the Cisco UCM for the Expressway-C SIP trunk must be changed to something other than 5060 or 5061
D) The listening port on the Cisco UCM for the Expressway-C SIP trunk is set to something other than 5060 or 5061. It must be set to 5060 for insecure and 5061 for secure SIP

Question 58

Which statement about the Cisco Webex hybrid service is true?

A) Expressway Connector is required for an on-premises Exchange server.
B) Hybrid Message service works only with Jabber cloud deployment.
C) Directory Connector is required for Azure AD.
D) Directory Connector must be deployed for OBTP to work with on-premises video devices.

Question 59

Refer to the exhibit. When a Jabber user attempts to connect from outside of the organization, the user enters the login information as "[e-mail]" and receives the error "Cannot find your services Automatically". The engineer tries to resolve SRV records used by Jabber. DNS A record "expressway-e.example.com" points to the Expressway-E IP and "cucm.example.com" points to the Cisco Unified Communications Manager. Which change resolves the DNS problem?

A) Change cisco-uds to point to the Expressway-E FQDN.
B) Change the collab-edge record to point to 5061.
C) Remove the cisco-uds SRV record for the external DNS.
D) Change the priority of the SRV record for cisco-uds.

Question 60

For a Mobile and Remote Access deployment, which server's certificate must include the Unified registration domain as a Subject Alternate Name?

A) Expressway-C server certificate
B) Cisco Unified Communications Manager server certificate
C) Expressway-E server certificate
D) Expressway-C and Expressway-E server certificate

Question 61

What is one of the user-related prerequisites for Jabber Team Messaging Mode Installation?

A) Create user accounts in Cisco Webex Control Hub only.
B) Create user accounts in Cisco Unified Communications Manager only.
C) Create user accounts in Cisco Unified IM and Presence.
D) Create user accounts in Cisco Unified CM and Cisco Webex Control Hub.

Question 62

Which two statements about Mobile and Remote Access certificate are true? (Choose two.)

A) Expressway Core can use private CA signed certificate.
B) You must upload the root certificates in the phone trust store.
C) Expressway must generate certificate signing request.
D) Expressway Edge must use public CA signed certificate.
E) The Jabber client can work with public or private CA signed certificate.

Question 63

Which role does Call Policy play when preventing toll fraud on Expressways?

A) It controls which calls are allowed, which calls are rejected, and which calls are redirected to a different destination.
B) It changes the calling and called number on a call.
C) It changes the audio protocol used by a call through Expressways.
D) It changes the audio codec used in a call through Expressways.

Question 64

Cisco Collaboration endpoints are exchanging encrypted signaling messages. What is one major complication in implementing NAT ALG for voice and video devices?

A) Internal endpoints cannot use addresses from the private address space.
B) The NAT ALG cannot inspect the contents of encrypted signaling messages.
C) NAT ALG introduces jitter in the voice path.
D) Source addresses cannot provide the destination addresses that remote endpoints should use for return packets.

Question 65

Which DNS record and port combination must be resolved externally for Mobile and Remote Access to be used?

A) _collab-edge on port 8443
B) _cisco-uds-edge on port 5061
C) _collab-edge on port 5061
D) _cisco-uds on port 8443