Refer to the exhibit. Call policy rules on an Expressway-E prevent external callers from the internet from calling a VIP whose URI is [email protected]. Which additional configuration setting is…

Question

Exhibit

Options

• AThe default zone on the Expressway-E must not be configured to treat as authenticated.
• BA search rule must be configured with an extract match for [email protected] to pass the call to the
• CThe Cisco TelePresence endpoint registered with the URI [email protected] must be set in "do not
• DSIP TLS must be disabled on the Expressway-E.

• A
  70% (30)
• B
  5% (2)
• C
  7% (3)
• D
  19% (8)

Explanation

Call policy rules on Expressway-E use the authentication status of the source zone to determine which rules apply. Calls arriving from the internet come in through the Default Zone, which represents unauthenticated external sources. If the Default Zone is configured to 'treat as authenticated,' the Expressway-E will apply authenticated-caller policies to those external calls, effectively bypassing the rule that is meant to block unauthenticated internet callers from reaching the VIP. For the call policy to correctly distinguish between trusted internal/B2B callers and untrusted internet callers, the Default Zone must NOT be set to treat as authenticated. Options B, C, and D address unrelated configurations that would not affect how the call policy evaluates the source zone's authentication status.

No community discussion yet for this question.