Refer to the exhibit. Which inbound connection should an administrator configure on the outside firewall?

HTTPS (tunneled over SSH between C and E): TCP 2222

How does an administrator configure an Expressway to make sure an external caller cannot reach a specific internal address?

configure FAC for the destination alias on the Expressway

block the call with a call policy rule in the Expressway-E

add the specific URI in the firewall section of the Expressway and block it

configure FAC for the destination alias on the Expressway

add a search rule route all calls to the Cisco UCM

Refer to the exhibit. Calls to locally registered endpoints are failing. At present, there are two endpoints registered locally to this Expressway. An H.323 endpoint with an alias of “EndpointA” is registered, and a SIP endpoint with an alias of “EndpointB@pod1.local” is also registered. How is this issue resolved?

The dialplan must be redesigned to use the transforms to convert the alias into SIP URI format and then use separate search rules for each format that needs to be dialed within the local zone.

The calls are failing because there are insufficient licenses. Additional licenses must be installed for the Expressway to route these calls.

The current search rule does not match the call, so the search rule must be modified to include a SIP Variant of "Standards-Based".

Calling parties are placing calls with the wrong domain. End-users must be instructed not to use the pod1.local domain as that is owned by the local system. Calls to any other domain would work.

Refer to the exhibit. A new neighbor zone is added for a new Cisco Meeting Server, but the zone is showing a SIP status of failed from the time the zone it was created. What should be done to resolve this issue?

The search rule must be changed to continue on match

The existing zone using ID 7 must be deleted

More bandwidth must be added to the appropriate pipes

The underlying DNS issue must be resolved

Which two considerations must be made when using Expressway media traversal? (Choose two.)

The Unified Communications traversal zone should be used for MRA

The Expressway-E must be put in a firewall DMZ segment

It is possible to NAT both Expressway-E interfaces

The Unified Communications traversal zone should be used for MRA

The Expressway-E must be put in a firewall DMZ segment

Expressway Control is the traversal server installed in the DMZ

Cisco UCM zone should be either traversal server or client

Jabber cannot log in via Mobile and Remote Access. You inspect Expressway-C logs and see this error message: XCP_JABBERD Detail="Unable to connect to host '%IP%', port 7400:(111) Connection refused"Which is the cause of this issue?

Expressway-E is listening on the wrong IP interface.

Rich Media Session licenses are not activated on Expressway-E.

Expressway-E is listening on the wrong IP interface.

The destination port for Expressway-E is set to 7400 instead of 8443 on the Expressway-C.

The XCP Service is not activated on Expressway-E.

Which configuration is required when implementing Mobile and Remote Access on Cisco Expressway?

Cisco Unified CM publisher address

What it is the purpose of using ICE for Mobile and Remote Access endpoints in the Cisco Collaboration infrastructure?

ICE enables Cisco Collaboration endpoints to determine if there is direct connectivity between them.

ICE controls the bandwidth usage for Cisco Collaboration endpoints if the endpoints are located outside the company network.

ICE enables Cisco Collaboration endpoints to determine if there is direct connectivity between them.

ICE uses FAST updates to optimize the video quality in case of packet loss. This technology is available only from Cisco Unified CM version 11.5 and later.

ICE enablement allows for the Cisco Collaboration endpoint to register through Expressway servers to Cisco Unified Communications Manager behind a firewall.

When deploying an Expressway Core and Expressway Edge cluster for mobile and remote access, which TLS verity subject name must be configured on the Expressway-E UC traversal zone?

Cisco Unified Communications Manager Publisher FQDN

Refer to the exhibit. Mobile Cisco Jabber cannot register with on-premises Cisco Unified Communications Manager using Mobile and Remote Access. Some logs were captured on Expressway Edge.Which action corrects this problem?

Ensure that the credential has been entered correctly.

Ensure that the peer address does not match the Common Name on certificate.

Ensure that the _cisco-uds SRV record has been configured.

Ensure that the credential has been entered correctly.

Ensure that the SIP domains are added on Expressway Core.

Which two statements about Expressway media traversal are true? (Choose two.)

The Expressway Edge must be put in a firewall DMZ segment.

The Unified Communications traversal zone can be used for Mobile and Remote Access.

Expressway Control is the traversal server installed in the DMZ.

The Expressway Edge must be put in a firewall DMZ segment.

Cisco Unified Communications Manager zone can be either traversal server or client.

The Unified Communications traversal zone can be used for Mobile and Remote Access.

Both Expressway Edge interfaces can be NATed.

Which zone is required between Expressway-E and Expressway-C in Mobile and Remote Access deployments?

Unified Communications traversal zone

For a Mobile and Remote Access deployment, which server's certificate must include the Unified registration domain as a Subject Alternate Name?

Expressway-E server certificate

Expressway-C server certificate

Cisco Unified Communications Manager server certificate

Expressway-E server certificate

Expressway-C and Expressway-E server certificate

A Jabber user is being prompted to trust the Expressway-E certificate when using Mobile and Remote Access. The administrator has validated that the Expressway-E certificate is being trusted by the machine running the Jabber client.What else can be done to solve this problem?

Include Cisco Unified Communications Manager registration domain in the Expressway-E certificate as a SAN.

Create a new CSR with new information on the SAN field.

Include Cisco Unified Communications Manager registration domain in the Expressway-E certificate as a SAN.

Change the FQDN of the Expressway.

Which two statements about Mobile and Remote Access certificate are true? (Choose two.)

Expressway must generate certificate signing request.

Expressway Edge must use public CA signed certificate.

Expressway Core can use private CA signed certificate.

You must upload the root certificates in the phone trust store.

Expressway must generate certificate signing request.

Expressway Edge must use public CA signed certificate.

The Jabber client can work with public or private CA signed certificate.

In a Mobile and Remote Access deployment, where must communications be encrypted with TLS?

Cisco Expressway-E and endpoints outside the enterprise

Cisco Expressway-C, Cisco Unified Communications Manager, and IM&P

Cisco Expressway-C, Cisco Expressway-E, and Cisco Unified Communications Manager

Cisco Expressway-C, Cisco Expressway-E, and endpoints outside the enterprise

When determining why Mobile and Remote Access to Cisco TelePresence equipment does not work anymore for an organization. There are several administrators and configuration changes could have happened without anyone knowing. Internal communication seems to be working, but no external system can register or call anywhere. Gathering symptoms, you also discover that no internal systems can call out either.What is TraversalZone missing that causes this issue?

route pattern to the DefaultZone

Refer to the exhibit. An engineer is deploying mobile and remote access in an environment that already had functioning Business to Business calling. Mobile and remote access SIP registrations are failing. To troubleshoot, SIP logs were collected. How is this issue resolved?

Change the "Incoming Port" in the SIP Trunk Security Profile for the Expressway-C to not match SIP line registrations

Change the SIP profile on the SIP trunk for the Expressway-E to Standard SIP Profile for TelePresence Endpoint

Change the "Incoming Port" in the SIP Trunk Security Profile for the Expressway-C to not match SIP line registrations

Enable autoregistration for the appropriate DN range on the Cisco UCM servers running the CallManager service

Write a custom normalization script since the "vcs-interop" normalization script does not allow registrations

Refer to the exhibit. Logins and failing via mobile and remote access. How is this resolved?

No Cisco UCM servers are configured in the Expressway-C. Servers must be added for CallManager and IM and Presence services.

Mobile and remote access login has not been enabled for the domain configured in the Expressway-C. The domain must be edited to allow Cisco UCM registrations.

SIP is disabled on the Expressway-E. The SIP protocol must be enabled on the server.

No Cisco UCM servers are configured in the Expressway-C. Servers must be added for CallManager and IM and Presence services.

Although a traversal client zone exists, there is no Unified Communications traversal client zone. One must be created.

Refer to the exhibit. Mobile and remote access is being added to an existing B2B deployment and is failing. When the administrator looks at the alarms on the Expressway-C, the snippets are shown. Which configuration action should the administrator take to fix this issue?

The listening port on the Expressway-C for SIP TCP must be changed to a value other than 5060

The listening port on the Expressway-C for SIP TLS must be changed to a value other than 5061

The listening port on the Cisco UCM for the Expressway-C SIP trunk must be changed to something other than 5060 or 5061

The listening port on the Cisco UCM for the Expressway-C SIP trunk is set to something other than 5060 or 5061. It must be set to 5060 for insecure and 5061 for secure SIP

Refer to the exhibit. The administrator attempted to log in, but Jabber clients cannot log in via mobile and remote access. How is this issue resolved?

A DNS SRV record must be created for _collab-edge._tls.pod1.local that points to the Expressway-E.

Skype for Business mode must be disabled on the DNS server because it conflicts with Jabber login requirements.

The domain pod1.local must be deprovisioned from the Webex cloud for Jabber logins.

A DNS SRV record must be created for _collab-edge._tls.pod1.local that points to the Expressway-E.

The username jabberuser@pod1.local is invalid. The user should instead sign-in simply as jabberuser.

Refer to the exhibit showing logs from the Expressway-C, a copy of the Expressway-E certificate, and the UC traversal zone configuration for the Expressway-C.An office administrator is deploying mobile and remote access and sees an issue with the UC traversal zone. The zone is showing “TLS negotiation failure”.What is causing this issue?

The Expressway-E does not have the FQDN of Cisco UCM listed as a SAN in its certificate

The Expressway-E certificate includes the Expressway-C FQDN as a SAN entry

The Expressway-C is missing the FQDN of Cisco UCM in the Common Name of its certificate

In the UC Traversal Zone on the Expressway-C, the peer address is set to the IP of the Expressway-E, which is not a SAN entry in the Expressway-E certificate

The Expressway-E does not have the FQDN of Cisco UCM listed as a SAN in its certificate

Which part of a hybrid cloud-based deployment with Cisco Webex Messenger Service is used for meeting capabilities?

Cisco Unified CM is always used for meeting capabilities.

Depending on the media flow, the Webex Meeting Center or local Cisco Unified CM meeting resources are used for meeting capabilities.

Depending on the origin of the user, the Webex Meeting Center or local Cisco Unified Communications Manager meeting resources are used for meeting capabilities.

Cisco Webex Meeting Center is always used for meeting capabilities.

Which step is required when configuring Cisco Webex Hybrid Message Service?

Register Expressway-C Connector Hosts to the Cisco Webex Cloud.

Register Expressway-C to Cisco Unified Communications Manager.

Add Expressway-C and Cisco United CM to the Cisco Webex Cloud.

Add Cisco Unity Connection to Expressway-E.

Which statement about the Cisco Webex hybrid service is true?

Directory Connector must be deployed for OBTP to work with on-premises video devices.

Expressway Connector is required for an on-premises Exchange server.

Hybrid Message service works only with Jabber cloud deployment.

Directory Connector is required for Azure AD.

Directory Connector must be deployed for OBTP to work with on-premises video devices.

Which two statements about Cisco Webex Video Mesh Nodes are true? (Choose two.)

Cloud-registered devices choose a VMN cluster based on the lowest STUN round trip delay.

When Cisco Unified Communications Manager works with multiple VMNs, Cisco Unified CM decides which VMN is used for signaling connection.

When Expressway Core works with VMN clusters, Expressway Core decides which VMN is used for signaling/media connection.

Cloud-registered devices choose a VMN cluster based on the lowest STUN round trip delay.

The cascading traffic between VMN must bypass the firewall.

When Cisco Unified Communications Manager works with multiple VMNs, Cisco Unified CM decides which VMN is used for signaling connection.

A VMN can terminate a media connection while operating in maintenance mode.

Refer to the exhibit. If the Webex Teams device cannot connect to Video Mesh Cluster-1 because it is busy, which media node does the Webex Teams device connect to next?

Both Cloud Node US-EAST and US-WEST

A Cisco Webex Hybrid Video Mesh Node can be installed in the DMZ and on the internal network.Which statement is true?

Installing a Video Mesh Node in the DMZ requires the external firewall to allow UDP traffic from ANY port to the address of the Video Mesh Nodes via port 5004.

Webex Cloud supports either a DMZ-based Mesh Node for security or an internal-based Mesh Node for media control only.

Installing a Video Mesh Node in the DMZ requires you to open TCP and UDP port 4444 in your internal firewall for full clustering functionality.

Installing a Video Mesh Node in the DMZ requires the external firewall to allow UDP traffic from ANY port to the address of the Video Mesh Nodes via port 5004.

Using internal Video Mesh Node also works due to Mobile and Remote Access setup for Webex Teams clients. A DMZ node is added for extra security.

Where are voice calls handled in a Cisco Jabber hybrid cloud-based deployment with Cisco Webex Platform Service?

Voice calls use local Cisco Unified Communications Manager for all calls.

Voice calls use Webex Calling platform for call control and use hybrid media nodes for local conferencing.

Voice calls use local media nodes to keep traffic internal for internal traffic and use Webex Calling for external calls.

Voice call use Cisco Unified Communications Manager for local calls and Webex Calling for external calls.

Voice calls use local Cisco Unified Communications Manager for all calls.

Refer to the exhibit. Cisco Unified Communications Manager routes the call via the Webex Meetings route list and route group to the Video Mesh cluster Node#1 in the Video Mesh cluster is hosting the meeting and has reached full capacity, but other nodes in the cluster still have spare capacity.What happens to the participant's call?

Another node in the cluster is used and an intra-cluster cascade between Webex and the new Video Mesh node is formed.

Another node in the cluster is used and an intra-cluster cascade between the two Video Mesh nodes is formed.

Another node in the cluster is used and an intra-cluster cascade between Webex and the new Video Mesh node is formed.

An organization wants to enable a Cisco Webex connector to synchronize all employees automatically with Cisco Webex instead of using a manual list.Where is the Webex Hybrid Directory Service configured?

Install Cisco Directory Connector on a Microsoft Windows Domain server and configure the software and Webex Control Hub.

Enable the directory service in Cisco Unified Communications Manager under Cisco Unified Serviceability and add the service in Webex Control Hub.

Enable the directory service on Cisco Expressway Edge for Office 365 or Cisco Expressway Core for internal Active Directory and add the service in Webex Control Hub.

Install the Cisco Express Connector and configure the device in Cisco Unified Communications Manager under Cisco Unified Serviceability and add the service in Webex Control Hub.

Cisco 300-820 Practice Test 2 - Free Online Exam Prep & Questions

Cisco 300-820 image Question 41 115119 10102024232844000000

Refer to the exhibit. An Expressway-C and Expressway-E are configured for B2B calling and the Expressway-E zone is set to TLS Verify Currently, calls do not reach the Expressway-C. The Traversal Client zone on the Expressway-C for B2B reports the information in the exhibit for the Peer 1 address.

Which action resolves this error?

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-820 Practice Test 2

Question

Cisco 300-820 Practice Tests

Practice Tests