Which two statements about Mobile and Remote Access certificate are true? (Choose two.)

Question

Options

• AExpressway Core can use private CA signed certificate.
• BYou must upload the root certificates in the phone trust store.
• CExpressway must generate certificate signing request.
• DExpressway Edge must use public CA signed certificate.
• EThe Jabber client can work with public or private CA signed certificate.

• A
  81% (22)
• B
  4% (1)
• C
  11% (3)
• D
  4% (1)

Explanation

In a Mobile and Remote Access (MRA) deployment, Expressway-C (Core) resides inside the enterprise network and communicates with internal systems like CUCM. Because it operates behind the firewall, it can use a private CA-signed certificate (A is true). The Jabber client is flexible and can work with certificates signed by either a public or private CA, as long as the signing CA is in the client's trust store (E is true). Option D is a common misconception - Expressway-E should use a publicly trusted certificate as a best practice so remote clients trust it automatically, but it is not an absolute requirement. Option B is incorrect because uploading root certificates to the phone trust store is not always required if the CA is already trusted. Option C is incorrect because generating a CSR on Expressway is one method, but not the only way to install a certificate.

No community discussion yet for this question.