A financial services firm is deploying a new Cisco Collaboration solution and must ensure all media streams between internal endpoints and the PSTN gateway are encrypted. The security team has mandated that the solution must not introduce significant processing overhead on the Cisco Unified Communications Manager (CUCM) publisher. Which configuration approach meets these requirements?
Answer and explanation
Correct answer: D
The optimal solution is to use a CUBE at the network edge. This allows internal devices to use SRTP for encrypted media, while the CUBE terminates the encryption and sends standard RTP to the PSTN, which typically does not support SRTP. This offloads the encryption/decryption processing from the CUCM and endpoints for external calls. Enabling Mixed-Mode encrypts all signaling and media but adds overhead. IPsec encrypts at the network layer, not the application layer, and is overly complex for this specific requirement. TLS only encrypts signaling, not the media stream itself.
Question 2
Multiple answers
A university is migrating its legacy Nortel PBX to a centralized Cisco UCM cluster hosted in a primary data center. The university has three remote campuses connected via MPLS links with varying bandwidth. To ensure call survivability during a WAN outage at a remote campus, which two components are essential to deploy at each remote site? (Select TWO)
Answer and explanation
Correct answers: B, C
An SRST-enabled gateway provides basic call control when the WAN link to the central CUCM fails. It allows internal calls and PSTN breakout.
A local DHCP server is critical to provide IP phones with their IP address and the TFTP server option, which directs them to the SRST gateway during a WAN failure.
Question 3
A field engineer is planning the virtualization of a Cisco Unity Connection cluster on a customer's existing VMware ESXi infrastructure, which was not purchased through Cisco. The customer wants to ensure they receive full Cisco TAC support for the Unity Connection application. Which deployment model must the engineer follow?
Answer and explanation
Correct answer: B
When deploying on customer-provided, non-Cisco UCS hardware, the 'Specifications-based Hardware Support' (Specs-based) model is required. This model dictates specific minimum hardware requirements (CPU speed, memory, disk I/O) that must be met. As long as these specs are met and a Cisco OVA is used, TAC will support the UC application. TRC (Tested Reference Configuration) applies to Cisco UCS hardware. The other options are insufficient for guaranteeing full TAC support.
Question 4
Case Study
A multinational corporation with headquarters in New York and major offices in London and Tokyo is consolidating its disparate, aging PBX systems into a single global Cisco collaboration solution. The primary business drivers are to reduce international calling costs, streamline dial plan management, and provide seamless collaboration features (IM, presence, video) to all 10,000 users. The company has a robust MPLS network connecting the three sites, but bandwidth is provisioned based on existing data needs and is a significant cost concern.
The project architect has proposed a single, centralized CUCM cluster in the New York data center to serve all users globally. Each major office will have a local gateway for PSTN access. The key requirements from the stakeholders are: 1) Calls between any two corporate sites must stay on the corporate WAN. 2) The solution must be resilient to inter-site WAN failures. 3) The global dial plan must be simplified, allowing users to dial a short extension to reach anyone in the company. 4) Bandwidth consumption for voice and video calls over the WAN must be strictly controlled.
To address these requirements, the architect plans to use specific CUCM features to manage call routing and bandwidth. They need to ensure that calls originating in London and destined for the London PSTN are routed through the local London gateway, and not hairpin across the WAN to the New York gateway. Similarly, bandwidth for video calls between New York and Tokyo needs to be managed to prevent network congestion.
Which CUCM feature is most critical for implementing the globalized, location-aware call routing and simplified dial plan?
Answer and explanation
Correct answer: D
Globalized Call Routing is the comprehensive solution. It uses 'Locations' to control bandwidth between sites (addressing requirement #4), 'Device Mobility' to manage device settings as they move, and a combination of Route Groups, Local Route Groups, and other dial plan elements to ensure calls are routed to the nearest local gateway (addressing requirement #2 and preventing hairpinning). This approach allows for a simplified, global dial plan while maintaining location-specific call routing logic. Partitions and CSS are for call blocking/permission, not location-based routing. SIP Route Patterns are part of the solution but not the overarching feature set.
Question 5
True or False: When creating a Bill of Materials (BOM) based on a Cisco Validated Design (CVD) for Collaboration, a field engineer must include every single Product ID (PID) listed in the CVD's sample BOM without modification to ensure design validity.
Answer and explanation
Correct answer: B
This statement is false. A Cisco Validated Design provides a tested architectural framework and a sample BOM as a starting point. The engineer must adapt the BOM to the specific customer's requirements, such as user count, call capacity, specific endpoint models, and licensing needs. The CVD is a guide, not a rigid prescription.
Question 6
During a Mobile and Remote Access (MRA) deployment, a network administrator reports that Jabber clients outside the corporate network can register to CUCM and see presence status, but they cannot make or receive audio/video calls. Internal Jabber clients function correctly. What is the most likely cause of this issue?
Answer and explanation
Correct answer: C
Registration (SIP) and presence (XMPP) use specific TCP ports that are likely open, allowing the client to connect. However, audio/video calls use a range of UDP ports for the RTP media stream. If these ports are blocked by a firewall, the signaling will succeed, but the media will fail, resulting in no audio or video. An incorrect SRV record would prevent initial discovery and registration. A down IM&P service would affect presence for all users, not just MRA.
Question 7
Multiple answers
A business analyst is using the Business Model Canvas to articulate the value of a proposed Cisco Webex adoption for a distributed workforce. To justify the investment to the finance department, the analyst needs to focus on the elements that directly impact the company's bottom line. Which two blocks of the Business Model Canvas are most relevant for this financial justification? (Select TWO)
Answer and explanation
Correct answers: C, E
This block details all the costs incurred to operate the business model. The analyst would show how Webex reduces costs (e.g., travel, real estate, legacy system maintenance).
This block represents the cash a company generates. The analyst can argue that improved collaboration via Webex leads to faster sales cycles, better customer retention, or new service offerings, thus increasing revenue.
Question 8
A retail company wants to deploy video-enabled customer service kiosks in its stores. The goal is to connect customers with remote product experts. The solution must be cost-effective for a large-scale rollout and simple for non-technical customers to use. Which Cisco endpoint and registration model is best suited for this use case?
Answer and explanation
Correct answer: B
Webex Desk series devices (like the Desk Mini or Desk Hub) registered to the Webex cloud can be configured in Kiosk mode. This provides a simplified, locked-down user interface ideal for public use. The cloud registration model simplifies large-scale management and deployment without requiring on-premises infrastructure at each store, making it cost-effective and scalable for a retail environment.
Question 9
The command utils diagnose test on the CUCM CLI is a comprehensive diagnostic tool. What is its primary function?
Answer and explanation
Correct answer: B
The utils diagnose test command runs a series of checks on the appliance to validate the health of the system. It verifies DNS resolution, NTP synchronization, database health, disk space, and other critical system components without causing a service interruption. It is a fundamental first step in troubleshooting general CUCM issues.
Question 10
Case Study
A healthcare consortium is building a shared video conferencing infrastructure to allow specialist physicians at a central hospital to consult with patients at remote rural clinics. Due to strict HIPAA regulations, all communication must be encrypted end-to-end, and the system must prevent unauthorized external parties from joining consultations. The consortium also wants to enable secure video calls with partner research institutions that use standards-based H.323/SIP video systems.
The proposed architecture includes an on-premises CUCM cluster for internal endpoint registration and a pair of Cisco Expressway servers (Expressway-C and Expressway-E) in a firewall DMZ for secure external communication. The security officer is concerned about exposing the network to external threats and has mandated a defense-in-depth approach.
The field engineer must design the Expressway configuration to meet these stringent security and interoperability requirements. This includes ensuring that only authenticated users can access the system from the internet, that all signaling and media are encrypted, and that a mechanism is in place to control which external domains are allowed to communicate with the internal system.
Which Expressway feature is specifically designed to control B2B video calls by validating and transforming SIP URI dialing between different domains?
Answer and explanation
Correct answer: D
Search Rules and Transforms are the core components in Expressway for policy-based call routing and URI manipulation. For B2B calls, an engineer would create Search Rules to match incoming calls from specific external domains (e.g., @partner-research.org), apply Transforms to rewrite the URI if needed, and route the call to the appropriate internal zone. This mechanism is essential for securely enabling interoperability with trusted external organizations while blocking unwanted traffic. Traversal Zones define the link between Expressway-C and E, but they don't handle the URI logic. CPL is not a primary feature for this task.
