300-820 · Question #172
An engineer is configuring the Expressway cluster to allow Jabber clients that are outside the enterprise network to register, make calls, and send instant messages using the internal Cisco UCM…
The correct answer is D. Establish certificate trust between the Expressway-C and Expressway-E. A UC Traversal Zone between Expressway-C and Expressway-E uses TLS (Transport Layer Security) for secure communication. Before this secure zone can be established, mutual certificate trust must be in place: the Expressway-C must trust the Expressway-E's certificate, and vice…
Question
An engineer is configuring the Expressway cluster to allow Jabber clients that are outside the enterprise network to register, make calls, and send instant messages using the internal Cisco UCM. Which action must be taken before a secure UC traversal zone is added to the Expressway-C?
Options
- AAdd Instant Message and Presence service clusters.
- BAdd a Cisco UCM cluster.
- CConfigure SIP OAuth mode.
- DEstablish certificate trust between the Expressway-C and Expressway-E.
How the community answered
(62 responses)- A5% (3)
- B2% (1)
- C6% (4)
- D87% (54)
Explanation
A UC Traversal Zone between Expressway-C and Expressway-E uses TLS (Transport Layer Security) for secure communication. Before this secure zone can be established, mutual certificate trust must be in place: the Expressway-C must trust the Expressway-E's certificate, and vice versa. This is accomplished by uploading each server's CA certificate (or the certificates themselves if self-signed) to the trusted CA store of the other server. Without this established certificate trust, the TLS handshake for the traversal zone will fail and the zone cannot be activated. Other steps like adding UCM clusters, configuring SIP OAuth, or adding IM&P clusters come after the traversal zone infrastructure is securely established.
Topics
Community Discussion
No community discussion yet for this question.