Question 1

Which two statements about Expressway media traversal are true? (Choose two.)

Options :

A : Expressway Control is the traversal server installed in the DMZ.

B : The Expressway Edge must be put in a firewall DMZ segment.

C : Cisco Unified Communications Manager zone can be either traversal server or client.

D : The Unified Communications traversal zone can be used for Mobile and Remote Access.

E :

Both Expressway Edge interfaces can be NATed.

Answer: B,D

Question 2

Which two internal SIP endpoints behind a firewall place calls to external devices? (Choose two.)

Options :

A : An Expressway-C communicates with the internal endpoint and forwards the media to and from an Expressway-E.

B : A Cisco Endpoint is configured with a publicly routable static NAT SIP address to advertise instead of is private IP address.

C : An Expressway-C communicates directly with the remote party using the ICE protocol

D : An Expressway-E is used as a VPN server to allow remote SIP edge servers to connect calls

E : An Expressway-C rewrites the SIP SDP to advertise its own IP address to the external party.

Answer: A,D

Question 3

An engineer attempts to upload a server certificate to an Expressway-C server but receives an error when they click the upload button that says that the file is invalid. The engineer is advised that this happens because the certificate was signed incorrectly and is missing an attribute. What must the engineer do to upload the certificate?

Options :

A : Create a certificate request via Certificate Services Web Page and ensure that the certificate validity period is five years because the Expressway server validates this during certificate import.

B : Create a certificate request via the Certificate Services Web Page and ensure that the Subject Common Name field contains the server FQDN and all Cisco Unified CM phone security profile names.

C : Create a new certificate template with "Server authentication” and "Client authentication" enabled and use this template when signing the Expressway server certificate.

D : Create a new certificate template with the certificate attribute "Allow private key to be exported" enabled and use this template when signing the Expressway server certificate.

Answer: B

Question 4

300-820-page39-image25

Refer to the exhibit. When a Jabber user attempts to connect from outside of the organization, the user

enters the login information as "[email protected]" and receives the error "Cannot find your services

Automatically". The engineer tries to resolve SRV records used by Jabber.

DNS A record "expressway-e.example.com" points to the Expressway-E IP and "cucm.example.com"

points to the Cisco Unified Communications Manager.

Which change resolves the DNS problem?

Options :

A :

Change cisco-uds to point to the Expressway-E FQDN.

B : Change the collab-edge record to point to 5061.

C : Remove the cisco-uds SRV record for the external DNS.

D : Change the priority of the SRV record for cisco-uds.

Answer: C

Question 5

An engineer is investigating failing incoming calls that are expected to connect. The engineer notices that the failed calls all have a port number of 5060 at the end of the URI. The search rules are configured in a way that they do not expect a port to be included. Which configuration allows the routing of this call?

Options :

A :

* transform with a pattern string of *(.*)@example.com(:5060)?"

* replace a suing of \[email protected]

B :

* search rule with a pattern string of “(.*)@example.com(:5050)?"

* replace a string of \1\2@example com

C :

search rule with a pattern string of “(.*)@example.com(:5060)?"

* replace a string of \[email protected]\2

D :

* transform with a pattern string of “(.*)@example.com(:5060)?"

* replace a string of \[email protected]\2

Answer: A

Higher Test Marks with Free Online 300-820 Exam Practice

Buying Options: