What is the result if force encryption for media is enabled in the Expressway on a zone that points to a system/endpoint that is not configured for encryption?

The correct answer is A. The call is dropped. When 'Force Encryption' is configured on an Expressway zone, it mandates that all media traversing that zone must be encrypted using SRTP. If the remote system or endpoint does not support encryption, the two sides cannot successfully negotiate compatible media parameters…

Cisco Expressway for Collaboration

Question

Options

AThe call is dropped.
BThe call works with one end only sending encrypted media.
CThe call renegotiates for unencrypted media.
DThe call uses encryption if available, or it falls back to unencrypted media.

How the community answered

(20 responses)

A
90% (18)
B
5% (1)
C
5% (1)

Explanation

When 'Force Encryption' is configured on an Expressway zone, it mandates that all media traversing that zone must be encrypted using SRTP. If the remote system or endpoint does not support encryption, the two sides cannot successfully negotiate compatible media parameters during the call setup (SDP negotiation fails). Because there is no fallback and the encryption requirement cannot be satisfied, the Expressway will reject the call, causing it to be dropped entirely. Options C and D describe graceful fallback behavior, which is only possible under 'Best Effort' or 'Auto' encryption modes, not 'Force' mode.

Topics

#Expressway Media Encryption#Expressway Zones#Call Processing#Security Policies

Community Discussion

No community discussion yet for this question.

Full 300-820 Practice