Cisco CCNP 300-820 Questions & Answers

• Question 21:

  How is the communication routed in a Hybrid deployment so that people on Cisco Cloud-Based IM are able to communicate with Cisco Jabber users in the on-premises environment?

  A. The Expressway-C enables a connection directly with the Cisco Webex Cloud to enable the hybrid service and allow the two services to communicate.

  B. The Expressway-E located in the DMZ establishes a connection with the Cisco Webex Cloud to enable the hybrid service and allow the two services to communicate.

  C. The Cisco Unified IM and Presence server establishes a connection using the outgoing path through the Cisco Expressways that terminates in the Cisco Webex Cloud to create the hybrid environment that links the two services together.

  D. The Cisco UC server establishes a connection using the outgoing path through the Cisco Expressways that terminates in the Cisco Webex Cloud to create the hybrid environment that links the two services together.

  Correct Answer: A

• Question 22:

  An administrator is deploying Cisco Expressways for Mobile and Remote Access. The registration domain is "example.com", and the Expressway-E FQDN is "expe.example.com". Cisco Jabber clients on the internet cannot discover services via DNS lookup. Which SRV records must be configured in the public DNS to allow Service Discovery?

  A. _collab-edge._tls.example.com

  B. _cisco-uds_tcp.expe.example.com

  C. _cisco-uds_tcp.example.com

  D. _collab-edge_tls.expe.example.com

  Correct Answer: A

• Question 23:

  How are Cisco Webex Video Mesh deployments supported?

  A. Video Mesh Dual NIC are supported in demilitarized deployments.

  B. Mixed Single NIC and Dual NIC are supported in the same data center deployments.

  C. Clustering Video Mesh Nodes over the WAN are supported if Round Trip Time is low.

  D. IPv6 and IPv4 deployments are supported for Video Mesh clusters.

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cloudCollaboration/wbxt/videomesh/cmgt_b_webex-video-mesh-deployment- guide/cmgt_b_hybrid-media-deployment-guide_chapter_011.html

• Question 24:

  Cisco Collaboration endpoints are exchanging encrypted signaling messages. What is one complication in implementing NAT ALG for voice and video devices?

  A. NAT ALG is not compatible with the H.323 signaling protocol.

  B. NAT ALG introduces latency in the media path.

  C. The NAT ALG cannot inspect the contents of encrypted signaling messages.

  D. NAT ALG requires the use of NAT re ection, which may not be supported on all fifirewalls.

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cucm/srnd/collab11/collab11/security.html upvoted 1 times

• Question 25:

  What is a benefit of Cisco Webex Messenger Cloud deployment?

  A. Cloud deployment is more secure than an on-premises deployment.

  B. There is no additional cost to use a cloud deployment.

  C. Cloud deployment allows interoperability between Cisco Jabber and Webex Teams users.

  D. Cloud deployment is faster than using an on-premises deployment.

  Correct Answer: C

  https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cloudCollaboration/spark/hybridservices/messageservice/cmgt_b_spark-hybrid-message- deployment-guide/cmgt_b_spark-hybrid-message-deployment-guide_chapter_00.html

• Question 26:

  An engineer configures a Cisco Collaboration environment to use Mobile and Remote Access for external access for company users. The engineer uses OAuth with refresh on the Cisco UCM SIP lines for extra security and improved user experience. During the setup, Mobile and Remote Access does not work, it is enabled on the Cisco UCM and Cisco Expressways. SIP trunks on ports 5090 and 5091 are configured to avoid con icts with other SIP trunks between internal Cisco UCM clusters. The traversal zone also uses port 6500. The traversal zone between Expressways shows no errors, and the requests hit Expressway-E from the Internet. What is the reason that the solution does not work?

  A. Mobile and Remote Access does not support OAuth with refresh with this configuration,

  B. The default port for Mobile and Remote Access is 6001. Therefore, the traversal port must be port 6001 for Mobile and Remote Access to work.

  C. The default port for Mobile and Remote Access is 6500, which creates a con ict with the existing traversal zone port.

  D. The default port for Mobile and Remote Access is 5091, which creates a con ict with the existing SIP trunks.

  Correct Answer: D

• Question 27:

  

  Refer to the exhibit. Call policy rules on an Expressway-E prevent external callers from the internet from calling a VIP whose URI is [email protected]. Which additional configuration setting is required for this call policy to function as intended?

  A. The default zone on the Expressway-E must not be configured to treat as authenticated.

  B. A search rule must be configured with an extract match for [email protected] to pass the call to the Expressway-C.

  C. The Cisco TelePresence endpoint registered with the URI [email protected] must be set in "do not disturb" mode.

  D. SIP TLS must be disabled on the Expressway-E.

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/voice_ip_comm/expressway/admin_guide/X14-0-2/exwy_b_cisco-expressway-administrator-guide- x1402/exwy_m_device-authentication.html

• Question 28:

  Which mechanism does TLS use to validate identity?

  A. server certificate

  B. shared secret

  C. username and a password

  D. IP address of the peer

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/wsma/configuration/15-mt/wsma-15-mt-book/wsma-tls.pdf upvoted 3 times

• Question 29:

  An engineer is investigating failing incoming calls that are expected to connect. The engineer notices that the failed calls all have a port number of 5060 at the end of the URI. The search rules are configured in a way that they do not expect a port to be included. Which configuration allows the routing of this call?

  A. * transform with a pattern string of *(.*)@example.com(:5060)?"

  * replace a suing of \[email protected]

  B. * search rule with a pattern string of "(.*)@example.com(:5050)?"

  * replace a string of \1\2@example com

  C. search rule with a pattern string of "(.*)@example.com(:5060)?"

  * replace a string of \[email protected]\2

  D. * transform with a pattern string of "(.*)@example.com(:5060)?"

  * replace a string of \[email protected]\2

  Correct Answer: A

• Question 30:

  Which two internal SIP endpoints behind a firewall place calls to external devices? (Choose two.)

  A. An Expressway-C communicates with the internal endpoint and forwards the media to and from an Expressway-E.

  B. A Cisco Endpoint is configured with a publicly routable static NAT SIP address to advertise instead of is private IP address.

  C. An Expressway-C communicates directly with the remote party using the ICE protocol

  D. An Expressway-E is used as a VPN server to allow remote SIP edge servers to connect calls

  E. An Expressway-C rewrites the SIP SDP to advertise its own IP address to the external party.

  Correct Answer: AB